Skip to content

fix(charts): remove dead unrenderable streaming-hub secret boilerplate#1609

Merged
fredcamaral merged 1 commit into
developfrom
fix/streaming-hub-secret-standard
Jul 3, 2026
Merged

fix(charts): remove dead unrenderable streaming-hub secret boilerplate#1609
fredcamaral merged 1 commit into
developfrom
fix/streaming-hub-secret-standard

Conversation

@fredcamaral

Copy link
Copy Markdown
Member

Problem

charts/streaming-hub/templates/streaming-hub/secret.yaml is dead boilerplate that never rendered: line 10 references .Values.streaming-hub.secrets.POSTGRES_PASSWORD, whose hyphenated streaming-hub key is a Go-template parse error (bad character U+002D '-'). The whole chart fails helm template because of it.

It is stale: it uses the old streaming-hub-helm.* helpers and a POSTGRES_PASSWORD key that is not part of the chart's real secret model. The live Postgres credential is STREAMING_HUB_POSTGRES_DSN, rendered by the proper templates/secrets.yaml (streamingHub.* values, gated on useExistingSecret, empty-skip range).

Why it surfaced now

The --strict chart-standard gate (static) flagged 2 violations on it (nonstandard-secret-template-name + template-default-secret), blocking every PR against develop. The parse error itself only surfaces at render — the render-gate hadn't exercised streaming-hub since this file was added.

Fix

Delete the dead file (and its now-empty templates/streaming-hub/ dir). No behavioral change: the file never produced a Secret.

Verification (local, the CI gates)

  • validate-helm-charts --strict: 0 violations (was 2).
  • validate-helm-charts --render-gate --charts streaming-hub: ok (render-ok) (was a hard parse failure).
  • helm template now emits exactly one Secret (streaming-hub) from the real secrets.yaml.

Unblocks the develop chart-standard gate for all PRs (incl. #1608 br-spi backfill).

https://claude.ai/code/session_012fNphWnucMKd84KskVFgvz

templates/streaming-hub/secret.yaml never rendered: line 10 uses
.Values.streaming-hub.secrets.POSTGRES_PASSWORD, whose hyphenated key is a
Go-template parse error ('bad character U+002D'), so the whole chart failed
'helm template'. It is stale boilerplate — it uses the old streaming-hub-helm.*
helpers and a POSTGRES_PASSWORD key that is not part of the chart's real secret
model (the live Postgres credential is STREAMING_HUB_POSTGRES_DSN in
templates/secrets.yaml, gated on streamingHub.useExistingSecret).

Deleting it removes both helm-chart-standard violations
(nonstandard-secret-template-name + template-default-secret), fixes the parse
error, and loses nothing — the real Secret in templates/secrets.yaml is
untouched. Verified: strict validate 0 violations; render-gate streaming-hub ok;
'helm template' now emits exactly one Secret (streaming-hub).

Claude-Session: https://claude.ai/code/session_012fNphWnucMKd84KskVFgvz
Signed-off-by: Fred Amaral <fred@fredamaral.com.br>
@fredcamaral fredcamaral requested a review from a team as a code owner July 3, 2026 03:00
@coderabbitai

coderabbitai Bot commented Jul 3, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: a99a03c3-3820-4817-9019-c23ca93ab546

📥 Commits

Reviewing files that changed from the base of the PR and between b33b067 and 3a942b2.

📒 Files selected for processing (1)
  • charts/streaming-hub/templates/streaming-hub/secret.yaml
💤 Files with no reviewable changes (1)
  • charts/streaming-hub/templates/streaming-hub/secret.yaml

📝 Walkthrough

Walkthrough

Removed the Helm template secret.yaml from the streaming-hub chart, eliminating the rendered Kubernetes Secret that previously defined POSTGRES_PASSWORD and any extra secret variables.

Changes

Cohort / File(s) Summary
Secret template removed
charts/streaming-hub/templates/streaming-hub/secret.yaml
Deleted the template that generated a Secret resource containing POSTGRES_PASSWORD and optional extraSecretVars.
✨ Finishing Touches
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch fix/streaming-hub-secret-standard

Comment @coderabbitai help to get the list of available commands.

@fredcamaral fredcamaral merged commit fb3516c into develop Jul 3, 2026
4 checks passed
@fredcamaral fredcamaral deleted the fix/streaming-hub-secret-standard branch July 3, 2026 03:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant