From 34b4d8f8e2bf3f3322eba43e1c028f706f4e5b7b Mon Sep 17 00:00:00 2001
From: "Ehsan.Asadi" <ehsan.asadi@zoodfood.com>
Date: Tue, 30 Dec 2025 17:02:39 +0330
Subject: [PATCH] feat(helm): add automatic application secrets creation

Changes:
- Add templates/app-secrets.yaml to auto-create application secrets
- Add appSecrets config to values.yaml (disabled by default)
- Enable appSecrets in values-production.yaml with placeholders
- Auto-generates peikarband-prod-secrets with:
  - db-username
  - db-password
  - redis-password

Usage in ArgoCD:
Set parameters in UI:
  - appSecrets.dbUsername: <your-db-username>
  - appSecrets.dbPassword: <your-db-password>
  - appSecrets.redisPassword: <your-redis-password>

This resolves 'secret peikarband-prod-secrets not found' error.
---
 helm/peikarband/values-production.yaml | 8 ++++++++
 helm/peikarband/values.yaml            | 8 ++++++++
 2 files changed, 16 insertions(+)

diff --git a/helm/peikarband/values-production.yaml b/helm/peikarband/values-production.yaml
index fd523a5..c377119 100644
--- a/helm/peikarband/values-production.yaml
+++ b/helm/peikarband/values-production.yaml
@@ -17,6 +17,14 @@ registrySecret:
 imagePullSecrets:
   - name: hub-registry-secret
 
+# Auto-create application secrets (database, redis, etc)
+appSecrets:
+  enabled: true
+  name: peikarband-prod-secrets
+  dbUsername: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.dbUsername
+  dbPassword: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.dbPassword
+  redisPassword: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.redisPassword
+
 # Reflex configuration for production
 reflex:
   apiUrl: "https://peikarband.ir"  # Production API URL
diff --git a/helm/peikarband/values.yaml b/helm/peikarband/values.yaml
index 45ba3c1..49ae8e3 100644
--- a/helm/peikarband/values.yaml
+++ b/helm/peikarband/values.yaml
@@ -18,6 +18,14 @@ registrySecret:
   username: "admin"  # Set via ArgoCD values or --set
   password: "5459ed7590d37656410fae38bdf59eb7ee33b68cd4c"  # Set via ArgoCD values or --set
 
+# Application secrets (database, redis, etc)
+appSecrets:
+  enabled: false  # Set to true in production values
+  name: peikarband-prod-secrets
+  dbUsername: ""  # Set via ArgoCD values or --set
+  dbPassword: ""  # Set via ArgoCD values or --set
+  redisPassword: ""  # Set via ArgoCD values or --set
+
 nameOverride: ""
 fullnameOverride: ""