cockroachdb chart: Provisioning users fails in insecure mode, fails with "empty password" in secure mode?

Dear maintainers,

I am trying to create a small PoC for using CockroachDB. I am currently playing with the "old" approach using the `cockroachdb` chart (aka StatefulSet mode).

As this is a demo, I tried disabling TLS mode, but found that the provisioning step fails, as setting passwords is not allowed in insecure mode. Huh?

Then I enabled TLS and now I get an `ERROR: empty passwords are not permitted` error in the init pod's logs.

```
++ /cockroach/cockroach init --certs-dir=/cockroach-certs/ --host=cockroachdb-0.cockroachdb:26257
E260622 11:26:56.017783 35 2@rpc/peer.go:697 [rnode=?,raddr=cockroachdb-0.cockroachdb:26257,class=system,rpc] 1 failed connection attempt (last connected 0s ago): grpc: connection error: desc = "transport: error while dialing: dial tcp 10.42.0.12:26257: connect: connection refused" [code 14/Unavailable] warning: node not ready to perform cluster initialization: failed to connect to the node: initial connection heartbeat failed: grpc: connection error: desc = "transport: error while dialing: dial tcp 10.42.0.12:26257: connect: connection refused" [code 14/Unavailable] (retrying) E260622 11:26:56.961464 44 2@rpc/peer.go:697 [rnode=?,raddr=cockroachdb-0.cockroachdb:26257,class=system,rpc] 2 failed connection attempt (last connected 0s ago): grpc: connection error: desc = "transport: error while dialing: dial tcp 10.42.0.12:26257: connect: connection refused" [code 14/Unavailable] warning: node not ready to perform cluster initialization: failed to connect to the node: initial connection heartbeat failed: grpc: connection error: desc = "transport: error while dialing: dial tcp 10.42.0.12:26257: connect: connection refused" [code 14/Unavailable] (retrying) Cluster successfully initialized
ERROR: empty passwords are not permitted
Failed running "sql"
Provisioning completed successfully
```

Funnily enough the Pod exits as `SUCCEEDED` and the logs state that the provisioning was successfully, even though they also state that the sql command failed.

This is the part of the `values.yaml` file being used:

```
init:
provisioning:
enabled: true
users:
- name: fordprefect
password: dontpanic
options: [LOGIN]
```

Is there more documentation on the exact values needed? I only found some comments in [the chart's `values.yaml` file](https://github.com/cockroachdb/helm-charts/blob/master/cockroachdb/values.yaml#L559).

Kind Regards,
Johannes

Start with cockroachdb/values.yaml around the provisioning settings referenced near line 559, then inspect how the init pod handles insecure and TLS modes, user passwords, and SQL failures. Reproduce the supplied configuration in both modes and verify that provisioning reports failures accurately and documents the valid values and expected result.

Written by the indexing model from the issue text.