From 93901143e8a17f377043c44cecc4e89a979e0ec4 Mon Sep 17 00:00:00 2001
From: alix-graylog <alix.fullerton@graylog.com>
Date: Wed, 1 Jul 2026 12:58:58 -0400
Subject: [PATCH] fix(secrets): Adding graylog-root-sha2 to automatic password
 generation

---
 charts/graylog/templates/config/secret/secrets.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/charts/graylog/templates/config/secret/secrets.yaml b/charts/graylog/templates/config/secret/secrets.yaml
index febbf89..986a9d3 100644
--- a/charts/graylog/templates/config/secret/secrets.yaml
+++ b/charts/graylog/templates/config/secret/secrets.yaml
@@ -20,8 +20,10 @@
 {{/* Restore backup */}}
 {{- if $this }}
   {{- $graylogPepper = index $this.data "GRAYLOG_PASSWORD_SECRET" }}
+  {{- $graylogSha = index $this.data "GRAYLOG_ROOT_PASSWORD_SHA2" | default $graylogSha }}
 {{ else if $backup }}
   {{- $graylogPepper = index $backup.data "graylog-secret" }}
+  {{- $graylogSha = index $backup.data "graylog-root-password-sha2" | default $graylogSha }}
 {{- end }}
 {{- if $backup }}
   {{- $mongoRootPassword = index $backup.data "mongodb-root-password" | default $mongoRootPassword }}
@@ -42,6 +44,7 @@ data:
   mongodb-db-password: {{ $mongoDbPassword }}
   {{- end }}
   graylog-secret: {{ $graylogPepper }}
+  graylog-root-password-sha2: {{ $graylogSha }}
 ---
 {{- end }}
 {{- $mongoUri := .Values.graylog.config.mongodb.customUri | default "" }}