Compare commits
No commits in common. "b911b7ea504289e56b149e1dde69754dd294ff48" and "7b5f24958125c7ac05185b697b95c342bb60a847" have entirely different histories.
b911b7ea50
...
7b5f249581
@ -9,7 +9,6 @@ resources:
|
|||||||
- ../../infrastructure/istio-gateway/vad
|
- ../../infrastructure/istio-gateway/vad
|
||||||
- ../../infrastructure/vault/vad
|
- ../../infrastructure/vault/vad
|
||||||
- ../../infrastructure/rabbitmq/vad
|
- ../../infrastructure/rabbitmq/vad
|
||||||
- ../../infrastructure/postgresql/vad
|
|
||||||
- ../../infrastructure/kafka/vad
|
- ../../infrastructure/kafka/vad
|
||||||
- ../../infrastructure/camunda/vad
|
- ../../infrastructure/camunda/vad
|
||||||
- ../../infrastructure/zitadel/vad
|
- ../../infrastructure/zitadel/vad
|
||||||
|
|||||||
@ -212,8 +212,8 @@ spec:
|
|||||||
path: secrets/data/camunda/keycloak-admin
|
path: secrets/data/camunda/keycloak-admin
|
||||||
key: admin-password
|
key: admin-password
|
||||||
KEYCLOAK_DATABASE_PASSWORD:
|
KEYCLOAK_DATABASE_PASSWORD:
|
||||||
path: secrets/data/camunda/postgresql
|
path: secrets/data/camunda/_keycloak_db
|
||||||
key: keycloak-password
|
key: password
|
||||||
global:
|
global:
|
||||||
storageClass: local-path
|
storageClass: local-path
|
||||||
tolerations: []
|
tolerations: []
|
||||||
|
|||||||
@ -1,6 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
resources:
|
|
||||||
- ../base
|
|
||||||
patches:
|
|
||||||
- path: postgresql.yaml
|
|
||||||
@ -1,104 +0,0 @@
|
|||||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
||||||
kind: HelmRelease
|
|
||||||
metadata:
|
|
||||||
name: postgresql
|
|
||||||
namespace: postgresql
|
|
||||||
spec:
|
|
||||||
interval: 5m
|
|
||||||
timeout: 2h
|
|
||||||
|
|
||||||
install:
|
|
||||||
timeout: 2h
|
|
||||||
remediation:
|
|
||||||
retries: 3
|
|
||||||
|
|
||||||
upgrade:
|
|
||||||
timeout: 2h
|
|
||||||
remediation:
|
|
||||||
retries: 3
|
|
||||||
|
|
||||||
values:
|
|
||||||
global:
|
|
||||||
security:
|
|
||||||
allowInsecureImages: true
|
|
||||||
defaultStorageClass: local-path
|
|
||||||
postgresql:
|
|
||||||
auth:
|
|
||||||
username: ""
|
|
||||||
database: ""
|
|
||||||
secretKeys:
|
|
||||||
userPasswordKey: "postgres-password"
|
|
||||||
auth:
|
|
||||||
username: ""
|
|
||||||
database: ""
|
|
||||||
secretKeys:
|
|
||||||
userPasswordKey: "postgres-password"
|
|
||||||
image:
|
|
||||||
registry: cr.yandex/crp3ccidau046kdj8g9q
|
|
||||||
repository: contour/postgresql
|
|
||||||
tag: 17.0.7
|
|
||||||
pullPolicy: Always
|
|
||||||
metrics:
|
|
||||||
enabled: false
|
|
||||||
prometheusRule:
|
|
||||||
enabled: false
|
|
||||||
primary:
|
|
||||||
automountServiceAccountToken: true
|
|
||||||
containerSecurityContext:
|
|
||||||
readOnlyRootFilesystem: false
|
|
||||||
persistence:
|
|
||||||
storageClass: local-path
|
|
||||||
size: 20Gi
|
|
||||||
customLivenessProbe:
|
|
||||||
exec:
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
- -c
|
|
||||||
- exec pg_isready -U "postgres" -d postgres -h 127.0.0.1 -p 5432
|
|
||||||
initialDelaySeconds: 30
|
|
||||||
periodSeconds: 10
|
|
||||||
timeoutSeconds: 5
|
|
||||||
successThreshold: 1
|
|
||||||
failureThreshold: 6
|
|
||||||
customReadinessProbe:
|
|
||||||
exec:
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
- -c
|
|
||||||
- exec pg_isready -U "postgres" -d postgres -h 127.0.0.1 -p 5432
|
|
||||||
initialDelaySeconds: 5
|
|
||||||
periodSeconds: 10
|
|
||||||
timeoutSeconds: 5
|
|
||||||
successThreshold: 1
|
|
||||||
failureThreshold: 6
|
|
||||||
customStartupProbe:
|
|
||||||
exec:
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
- -c
|
|
||||||
- exec pg_isready -U "postgres" -d postgres -h 127.0.0.1 -p 5432
|
|
||||||
initialDelaySeconds: 30
|
|
||||||
periodSeconds: 10
|
|
||||||
timeoutSeconds: 5
|
|
||||||
successThreshold: 1
|
|
||||||
failureThreshold: 6
|
|
||||||
nodeSelector:
|
|
||||||
dedicated: generic
|
|
||||||
tolerations: []
|
|
||||||
contour:
|
|
||||||
enabled: true
|
|
||||||
adminUser: "postgres"
|
|
||||||
vault:
|
|
||||||
enabled: true
|
|
||||||
role: postgresql
|
|
||||||
authPath: auth/kubernetes
|
|
||||||
secretPath: secrets/data/postgresql/admin
|
|
||||||
secretKey: postgres-password
|
|
||||||
usersSecretPath: secrets/data/postgresql/users
|
|
||||||
sharedPreloadLibraries: "timescaledb,pg_stat_statements"
|
|
||||||
databases:
|
|
||||||
- name: zitadel
|
|
||||||
user: zitadel
|
|
||||||
passwordKey: zitadel
|
|
||||||
extensions: []
|
|
||||||
restoreFromDump: false
|
|
||||||
@ -6,9 +6,6 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
interval: 5m
|
interval: 5m
|
||||||
timeout: 10m
|
timeout: 10m
|
||||||
dependsOn:
|
|
||||||
- name: postgresql
|
|
||||||
namespace: postgresql
|
|
||||||
postRenderers:
|
postRenderers:
|
||||||
- kustomize:
|
- kustomize:
|
||||||
patches:
|
patches:
|
||||||
@ -136,7 +133,7 @@ spec:
|
|||||||
- name: ZITADEL_MACHINE_IDENTIFICATION_HOSTNAME_ENABLED
|
- name: ZITADEL_MACHINE_IDENTIFICATION_HOSTNAME_ENABLED
|
||||||
value: "true"
|
value: "true"
|
||||||
- name: ZITADEL_DATABASE_POSTGRES_HOST
|
- name: ZITADEL_DATABASE_POSTGRES_HOST
|
||||||
value: "postgresql.postgresql.svc.cluster.local"
|
value: "192.168.8.131"
|
||||||
- name: ZITADEL_DATABASE_POSTGRES_PORT
|
- name: ZITADEL_DATABASE_POSTGRES_PORT
|
||||||
value: "5432"
|
value: "5432"
|
||||||
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
|
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user