From 1e7cc5b6ada557a3522bfc40513f4103beb0d98b Mon Sep 17 00:00:00 2001
From: dkeven <82354774+dkeven@users.noreply.github.com>
Date: Thu, 20 Nov 2025 15:00:17 +0800
Subject: [PATCH] fix(manifest): handle the case of present secret with missing
 key (#2091)

---
 .../cluster/deploy/auth_backend_deploy.yaml    | 18 ++++++++----------
 1 file changed, 8 insertions(+), 10 deletions(-)

diff --git a/framework/authelia/.olares/config/cluster/deploy/auth_backend_deploy.yaml b/framework/authelia/.olares/config/cluster/deploy/auth_backend_deploy.yaml
index 6734f7743..36b3e2987 100644
--- a/framework/authelia/.olares/config/cluster/deploy/auth_backend_deploy.yaml
+++ b/framework/authelia/.olares/config/cluster/deploy/auth_backend_deploy.yaml
@@ -19,17 +19,15 @@
 {{- $pg_password = (index $auth_secret "data" "pg_password") -}}
 {{- $nats_password = (index $auth_secret "data" "nats_password") -}}
 {{- $probe_secret = (index $auth_secret "data" "probe_secret") -}}
-
-{{ else -}}
-{{ $jwt_secret = randAlphaNum 16 | b64enc }}
-{{ $session_secret = randAlphaNum 16 | b64enc }}
-{{ $hmac_secret = randAlphaNum 16 | b64enc }}
-{{ $encryption_key = randAlphaNum 32 | b64enc }}
-{{ $redis_password = randAlphaNum 16 | b64enc }}
-{{ $pg_password = randAlphaNum 16 | b64enc }}
-{{ $nats_password = randAlphaNum 16 | b64enc }}
-{{ $probe_secret = randAlphaNum 16 | b64enc }}
 {{- end -}}
+{{- $jwt_secret = (default (randAlphaNum 16 | b64enc) $jwt_secret) -}}
+{{- $session_secret = (default (randAlphaNum 16 | b64enc) $session_secret) -}}
+{{- $hmac_secret = (default (randAlphaNum 16 | b64enc) $hmac_secret) -}}
+{{- $encryption_key = (default (randAlphaNum 32 | b64enc) $encryption_key) -}}
+{{- $redis_password = (default (randAlphaNum 16 | b64enc) $redis_password) -}}
+{{- $pg_password = (default (randAlphaNum 16 | b64enc) $pg_password) -}}
+{{- $nats_password = (default (randAlphaNum 16 | b64enc) $nats_password) -}}
+{{- $probe_secret = (default (randAlphaNum 16 | b64enc) $probe_secret) -}}
 
 ---
 apiVersion: v1