++ zitadel contract secret

infrastructure/gitlab-runner/vk-infra/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - namespace.yaml
   - gitlab-runner.yaml
+  - rbac.yaml

infrastructure/gitlab-runner/vk-infra/rbac.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: gitlab-runner-jobs-cluster-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: gitlab-managed-apps

infrastructure/gitlab-runner/vk-prod/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - namespace.yaml
   - gitlab-runner.yaml
+  - rbac.yaml

infrastructure/gitlab-runner/vk-prod/rbac.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: gitlab-runner-jobs-cluster-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: gitlab-managed-apps

infrastructure/zitadel/vk-infra/zitadel.yaml

@@ -73,42 +73,42 @@ spec:
       - name: ZITADEL_DATABASE_POSTGRES_HOST
         valueFrom:
           secretKeyRef:
-            name: zitadel-db
+            name: zitadel-postgresql
             key: host
       - name: ZITADEL_DATABASE_POSTGRES_PORT
         valueFrom:
           secretKeyRef:
-            name: zitadel-db
+            name: zitadel-postgresql
             key: port
       - name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
         valueFrom:
           secretKeyRef:
-            name: zitadel-db
-            key: user
+            name: zitadel-postgresql
+            key: username
       - name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
         valueFrom:
           secretKeyRef:
-            name: zitadel-db
+            name: zitadel-postgresql
             key: password
       - name: ZITADEL_DATABASE_POSTGRES_ADMIN_EXISTINGDATABASE
         valueFrom:
           secretKeyRef:
-            name: zitadel-db
+            name: zitadel-postgresql
             key: database
       - name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
         valueFrom:
           secretKeyRef:
-            name: zitadel-db
-            key: user
+            name: zitadel-postgresql
+            key: username
       - name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
         valueFrom:
           secretKeyRef:
-            name: zitadel-db
+            name: zitadel-postgresql
             key: password
       - name: ZITADEL_DATABASE_POSTGRES_DATABASE
         valueFrom:
           secretKeyRef:
-            name: zitadel-db
+            name: zitadel-postgresql
             key: database
       - name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
         value: prefer