system-database secret documentation is unclear

[avilatusell]

The URL field describes that the format of the URL must be:
<DBScheme>://<AdminUser>:<AdminPassword>@<DatabaseHost>/<DatabaseName>, where <AdminUser> must be an already existing user in the external database with full permissions on the specified <DatabaseName> logical database and <DatabaseName> must be an already existing logical database in the external database.

However the

• DB_USER field is described as Non-administrative database username.
• DB_PASSWORD is described as Password of the non-administrative database user.

which doesn't align with what is described in the URL field.

The request is to review the description of the DB_USER and DB_PASSWORD fields in system-database secret. This issue is related to THREESCALE-9735.

[eguzki]

After reviewing the code, unless I missed something:

• DB_USER and DB_PASSWORD are only used for deploying internally mysql or postgresql. These variables are optional, used in conjunction to create a new user and to set that user's password. For mysql, the root password is read from URL field and a second user is created with DB_USER and DB_PASSWORD. On the other hand, for postgresql, DB_USER and DB_PASSWORD are used in conjunction for the default superuser.
• For externally managed databases, they are not being used. Only the URL field of the secret is being used.