From 11b65d5b885b809b45e6a6a9999bfe9a1a7db4ea Mon Sep 17 00:00:00 2001
From: chpark <chpark@wace.me>
Date: Thu, 23 Apr 2026 01:35:42 +0900
Subject: [PATCH] =?UTF-8?q?fix(ci):=20secrets=20=ED=8C=8C=EC=9D=BC=20?=
 =?UTF-8?q?=EB=8D=AE=EC=96=B4=EC=93=B0=EA=B8=B0=20=EB=B0=A9=EC=A7=80=20(wr?=
 =?UTF-8?q?ite=5Fkv=20=EC=82=AC=EC=9A=A9)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 scripts/deploy-remote.sh | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/scripts/deploy-remote.sh b/scripts/deploy-remote.sh
index 8e13686..24635de 100644
--- a/scripts/deploy-remote.sh
+++ b/scripts/deploy-remote.sh
@@ -52,10 +52,19 @@ if [ -r "$SECRETS_FILE" ]; then
 fi
 POSTGRES_PASSWORD="${POSTGRES_PASSWORD:-$(openssl rand -hex 24)}"
 JWT_SECRET="${JWT_SECRET:-$(openssl rand -hex 32)}"
-cat > "$SECRETS_FILE" <<EOF
-POSTGRES_PASSWORD=$POSTGRES_PASSWORD
-JWT_SECRET=$JWT_SECRET
-EOF
+
+# 기존 secret 파일의 다른 키들은 보존하고 이 두 값만 갱신
+write_kv() {
+  local key="$1" val="$2" file="$3"
+  if [ -f "$file" ]; then
+    grep -v "^${key}=" "$file" > "${file}.tmp" || true
+    mv "${file}.tmp" "$file"
+  fi
+  echo "${key}=${val}" >> "$file"
+}
+touch "$SECRETS_FILE"
+write_kv POSTGRES_PASSWORD "$POSTGRES_PASSWORD" "$SECRETS_FILE"
+write_kv JWT_SECRET "$JWT_SECRET" "$SECRETS_FILE"
 chmod 600 "$SECRETS_FILE"
 
 kubectl -n insurance create secret generic postgres-credentials \