apiVersion: v1
kind: ConfigMap
metadata:
  name: identity-postgres-initdb
  labels:
    app.kubernetes.io/name: identity-postgres
    app.kubernetes.io/instance: identity-postgres
    app.kubernetes.io/version: "16.4"
    app.kubernetes.io/component: database
    app.kubernetes.io/part-of: auth-platform
    app.kubernetes.io/managed-by: kustomize
data:
  01-create-databases.sh: |
    #!/usr/bin/env bash
    set -euo pipefail

    KEYCLOAK_DB_PASSWORD="$(cat /run/secrets/keycloak-db/password)"
    AUTH_SERVER_DB_PASSWORD="$(cat /run/secrets/auth-server-db/SPRING_DATASOURCE_PASSWORD)"

    psql --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-'SQL'
    CREATE ROLE keycloak LOGIN;
    CREATE DATABASE keycloak OWNER keycloak;
    CREATE ROLE auth_server LOGIN;
    CREATE DATABASE auth_server OWNER auth_server;
    SQL

    psql --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" \
      -c "ALTER ROLE keycloak PASSWORD '$(printf '%s' "$KEYCLOAK_DB_PASSWORD" | sed "s/'/''/g")';"
    psql --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" \
      -c "ALTER ROLE auth_server PASSWORD '$(printf '%s' "$AUTH_SERVER_DB_PASSWORD" | sed "s/'/''/g")';"