generate url safe password for postgres

civiform · Aug 27, 2024 · f37ba89 · f37ba89
1 parent f52022b
commit f37ba89
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/cloud/azure/bin/lib/key_vault.sh b/cloud/azure/bin/lib/key_vault.sh
@@ -92,9 +92,14 @@ function key_vault::add_generated_secrets() {
   shift
   for key in "$@"; do
     echo "Generating secret: ${key}"
+    local USECHARSET=$CHARSET
+    if [[ "${key}" == "postgres-password" ]]; then
+      echo "Using url safe charset"
+      USECHARSET=$URL_SAFE
+    fi 
     local SECRET_VALUE="$(head /dev/urandom \
-      | LC_CTYPE=ALL tr -dc "${CHARSET}" \
-      | LC_CTYPE=ALL cut -c -40)"
+    | LC_CTYPE=ALL tr -dc "${USECHARSET}" \
+    | LC_CTYPE=ALL cut -c -40)"
     echo "Setting secret: ${key}"
     key_vault::add_secret "${VAULT_NAME}" "${key}" "${SECRET_VALUE}"
   done