Method resetPassword

controlplane/provisioning/api.go:446–486

(c *gin.Context)

	warehouse := &configstore.ManagedWarehouse{
		DataStore: ds,
		DuckLake:  configstore.ManagedWarehouseDuckLake{Enabled: ducklakeEnabled},
		// Stamp the authoritative Duckling CR name: the org ID verbatim. Org IDs
		// are validated as lowercase DNS-1123 labels at this endpoint, so no
		// transform is needed — and nothing downstream ever derives the name.
		DucklingName: orgID,
	}
	if warehouse.DucklingName == "" {
		c.JSON(http.StatusBadRequest, gin.H{"error": "duckling_name is required"})
		return
	}
	// Metadata backend (the Postgres that hosts the DuckLake catalog).
	// Provisioning shape differs per type; the catalog choice above is
	// orthogonal.
	switch req.MetadataStore.Type {
	case configstore.MetadataStoreKindCnpgShard:
		// No per-claim config — the composition picks the active shard from
		// chart values and provisions the per-tenant role+database there.
		warehouse.MetadataStore.Kind = configstore.MetadataStoreKindCnpgShard

	case configstore.MetadataStoreKindExternal:
		// A pre-existing Postgres. Endpoint (RDS host) + the AWS Secrets Manager
		// secret name for the password are required; user/database default to
		// "postgres" at the XRD.
		ext := req.MetadataStore.External
		if ext == nil || ext.Endpoint == "" || ext.PasswordAWSSecret == "" {
			c.JSON(http.StatusBadRequest, gin.H{"error": "metadata_store.type 'external' requires metadata_store.external.endpoint and metadata_store.external.password_aws_secret"})
			return
		}
		warehouse.MetadataStore = configstore.ManagedWarehouseMetadataStore{
			Kind:              configstore.MetadataStoreKindExternal,
			Endpoint:          ext.Endpoint,
			Username:          ext.User,
			DatabaseName:      ext.Database,
			PasswordAWSSecret: ext.PasswordAWSSecret,
		}

	default:
		c.JSON(http.StatusBadRequest, gin.H{"error": fmt.Sprintf("metadata_store.type must be %q or %q (got %q)", configstore.MetadataStoreKindCnpgShard, configstore.MetadataStoreKindExternal, req.MetadataStore.Type)})
		return
	}

	// Generate the root password. The plaintext is returned in this
	// response only — it is never stored, only the bcrypt hash is
	// persisted via the transactional Provision below.