Merge pull request 'fix: configurable root credentials for dbinit + allow dbinit for external DB' (#5) from fix/external-db-credentials-and-dbinit into main

dbInit.mysqlUser and dbInit.mysqlPasswordKey are now configurable in
values.yaml. Defaults to root/mysql-root-password since SQL migrations
need SUPER privilege for triggers with DEFINER=root@%.

App (hades-service) still connects as hades_user — only the migration
job uses root.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

hades/templates/job-dbinit.yaml

@@ -50,12 +50,12 @@ spec:
         - name: MYSQL_DATABASE
           value: {{ include "hades.databaseName" . | quote }}
         - name: MYSQL_USER
-          value: {{ include "hades.databaseUsername" . | quote }}
+          value: {{ .Values.dbInit.mysqlUser | default "root" | quote }}
         - name: MYSQL_PWD
           valueFrom:
             secretKeyRef:
               name: {{ include "hades.databaseSecretName" . }}
-              key: mysql-password
+              key: {{ .Values.dbInit.mysqlPasswordKey | default "mysql-root-password" }}
         command:
           - /bin/bash
           - -c

hades/values.yaml

@@ -123,7 +123,7 @@ database:
   host: ""  # Will be set to mysql.fullname if mysql.enabled=true
   port: "3306"
   name: "hades_db"
-  username: "mysql_user"
+  username: "hades_user"
   password: ""  # Leave empty to auto-generate
   # For external database, set mysql.enabled=false and configure above values
 
@@ -166,6 +166,8 @@ mysql:
 # Automatically runs all SQL migration files from sql/ directory in alphabetical order
 dbInit:
   enabled: true
+  mysqlUser: "root"
+  mysqlPasswordKey: "mysql-root-password"
 
 # ConfigMap for application configuration files
 config: