Skip to content

Replace secretName with a secrets array on postgreSqlDatabases and mySqlDatabases #193

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
willdavsmith wants to merge 3 commits into from
Closed

Replace secretName with a secrets array on postgreSqlDatabases and mySqlDatabases #193

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a3a14f0
Add x-radius-secret-reference marker to postgreSqlDatabases secretName
willdavsmith Jun 25, 2026
bea8622
Replace secretName with a secrets array on postgreSqlDatabases
willdavsmith Jun 26, 2026
5d5153e
Replace secretName with a secrets array on mySqlDatabases
willdavsmith Jun 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 15 additions & 9 deletions Data/mySqlDatabases/mySqlDatabases.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,16 @@ namespace: Radius.Data
types:
mySqlDatabases:
description: |
The Radius.Data/mySqlDatabases Resource Type deploys a MySQL database. To deploy a new MySQL database, first add a secret resource with the database credentials to the application definition Bicep file, then add a mySqlDatabases resource referencing the secret name.
The Radius.Data/mySqlDatabases Resource Type deploys a MySQL database. To deploy a new MySQL database, first add a secret resource with the database credentials to the application definition Bicep file, then add a mySqlDatabases resource listing that secret in its `secrets` array.
```
resource mysql 'Radius.Data/mySqlDatabases@2025-08-01-preview' = {
name: 'mysql'
properties: {
environment: environment
application: myApplication.id
secretName: dbCredentials.name
secrets: [
dbCredentials.id
]
}
}

Expand All @@ -19,11 +21,11 @@ types:
environment: environment
application: myApplication.id
data: {
USERNAME: {
username: {
value: 'admin'
}
PASSWORD: {
# From password parameter passed in via CLI
password: {
// From password parameter passed in via CLI
value: password
}
}
Expand Down Expand Up @@ -79,9 +81,13 @@ types:
database:
type: string
description: "(Optional) The name of the database. Defaults to `mysql_db` if not provided."
secretName:
type: string
description: "(Required) The name of the secret containing the database credentials."
secrets:
type: array
x-radius-secret-binding: true
description: "(Required) The Radius.Security/secrets resources holding the credentials this database needs. Each entry is a secret resource ID (for example `dbSecret.id`). Radius loads every key of each listed secret and exposes it to the recipe as `{{context.resource.secrets.<secretName>.<key>}}`, where `<secretName>` is the secret resource's name and `<key>` is a key in its `data`."
items:
type: string
description: "The resource ID of a Radius.Security/secrets resource (for example `dbSecret.id`)."
version:
type: string
enum: ['5.7', '8.0', '8.4']
Expand All @@ -94,4 +100,4 @@ types:
type: integer
description: "(Read-only) The port number used to connect to the database."
readOnly: true
required: [environment,secretName]
required: [environment,secrets]
18 changes: 12 additions & 6 deletions Data/postgreSqlDatabases/postgreSqlDatabases.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,15 +2,17 @@ namespace: Radius.Data
types:
postgreSqlDatabases:
description: |
The Radius.Data/postgreSqlDatabases Resource Type deploys a PostgreSQL database. To deploy a PostgreSQL database, first add a secret resource with the database credentials to the application definition Bicep file, then add a postgreSqlDatabases resource referencing the secret name.
The Radius.Data/postgreSqlDatabases Resource Type deploys a PostgreSQL database. To deploy a PostgreSQL database, first add a secret resource with the database credentials to the application definition Bicep file, then add a postgreSqlDatabases resource listing that secret in its `secrets` array.
```
resource postgresql 'Radius.Data/postgreSqlDatabases@2025-08-01-preview' = {
name: 'postgresql'
properties: {
environment: environment
application: myApplication.id
size: 'S'
secretName: dbCredentials.name
secrets: [
dbCredentials.id
]
}
}

Expand Down Expand Up @@ -81,9 +83,13 @@ types:
type: string
enum: ['S', 'M', 'L']
description: "(Optional) The size of the PostgreSQL database. Defaults to `S` if not provided."
secretName:
type: string
description: "(Required) The name of the secret containing the database credentials."
secrets:
type: array
x-radius-secret-binding: true
description: "(Required) The Radius.Security/secrets resources holding the credentials this database needs. Each entry is a secret resource ID (for example `dbSecret.id`). Radius loads every key of each listed secret and exposes it to the recipe as `{{context.resource.secrets.<secretName>.<key>}}`, where `<secretName>` is the secret resource's name and `<key>` is a key in its `data`."
items:
type: string
description: "The resource ID of a Radius.Security/secrets resource (for example `dbSecret.id`)."
database:
type: string
description: "(Optional) The name of the database. Defaults to `postgres_db` if not provided."
Expand All @@ -98,4 +104,4 @@ types:
type: string
description: The port number used to connect to the database.
readOnly: true
required: [environment,secretName]
required: [environment,secrets]
Loading