Merge branch '1079-kratos-smtp-password-value-needs-to-be-url-encoded' into 'main'

Resolve "Kratos SMTP password value needs to be URL encoded"

Closes #1079

See merge request stackspin/stackspin!690

flux2/core/base/single-sign-on/single-sign-on-values-configmap.yaml

@@ -65,7 +65,7 @@ data:
               base_url: https://sso.${domain}/api/
           courier:
             smtp:
-              connection_uri: smtp://${outgoing_mail_smtp_user}:${outgoing_mail_smtp_password}@${outgoing_mail_smtp_host}:${outgoing_mail_smtp_port}/
+              connection_uri: smtp://${outgoing_mail_smtp_user}:${outgoing_mail_smtp_password_urlencoded}@${outgoing_mail_smtp_host}:${outgoing_mail_smtp_port}/
               from_address: ${outgoing_mail_from_address}
           secrets:
             session:

install/install-stackspin.sh

@@ -5,6 +5,12 @@ set -euo pipefail
 # shellcheck source=install/flux-version-check.sh
 . "$(dirname "$0")/flux-version-check.sh"
 
+# Check if stackspin-cluster-variables secret exists
+smtp_password=$(kubectl get secret -n flux-system stackspin-cluster-variables --template '{{.data.outgoing_mail_smtp_password}}' | base64 -d)
+smtp_password_urlencoded=$(python -c "import urllib.parse; print(urllib.parse.quote('${smtp_password}', safe=''), end='')" | base64 -w0)
+# Add url-encoded version of password to the cluster
+kubectl patch secret -n flux-system stackspin-cluster-variables -p "{\"data\": {\"outgoing_mail_smtp_password_urlencoded\": \"${smtp_password_urlencoded}\"}}"
+
 flux install \
   --network-policy=false \
   --watch-all-namespaces=true \