{{- $webhook_secret := .Values.updater.webhook_secret }}
{{- $apiUsername := .Values.updater.apiUsername }}
{{- $apiPassword := .Values.updater.apiPassword }}
{{- $secretName := printf "%s-webhook-secret" .Release.Name }}
{{- $secretData := (lookup "v1" "Secret" .Release.Namespace $secretName).data }}


{{- if $secretData }}
  {{- $webhook_secret = index $secretData "WEBHOOK_SECRET" | b64dec }}
  {{- $apiUsername = index $secretData "API_USERNAME" | b64dec }}
  {{- $apiPassword = index $secretData "API_PASSWORD" | b64dec }}
{{- else }}
  {{- if not $webhook_secret }}
  {{- $webhook_secret = randAlphaNum 10 }}
  {{- end }}
  {{- if not $apiUsername}}
  {{- $apiUsername = randAlphaNum 10 }}
  {{- end }}
  {{- if not $apiPassword}}
  {{- $apiPassword = randAlphaNum 10 }}
  {{- end }}
{{- end}}

apiVersion: v1
kind: Secret
metadata:
  name: {{ $secretName }}
  namespace: {{ .Release.Namespace }}
type: Opaque
data:
  WEBHOOK_SECRET: {{ $webhook_secret | b64enc }}
  API_USERNAME: {{ $apiUsername | b64enc }}
  API_PASSWORD: {{ $apiPassword | b64enc }}
  SCRIPT_NAME: {{ "/.webhook" | b64enc }}