99 lines
2.3 KiB
YAML
99 lines
2.3 KiB
YAML
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: postgresql-secrets
|
|
namespace: postgresql
|
|
spec:
|
|
interval: 10m
|
|
timeout: 1m30s
|
|
retryInterval: 30s
|
|
targetNamespace: postgresql
|
|
path: ./postgresql
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
namespace: flux-system
|
|
name: home-cluster-ops-secrets
|
|
dependsOn:
|
|
- name: repositories
|
|
namespace: flux-system
|
|
decryption:
|
|
provider: sops
|
|
secretRef:
|
|
name: postgresql-sops-age
|
|
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: postgresql
|
|
namespace: postgresql
|
|
spec:
|
|
releaseName: postgresql
|
|
chart:
|
|
spec:
|
|
chart: postgresql
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: bitnami
|
|
interval: 1h
|
|
install:
|
|
remediation:
|
|
retries: 3
|
|
values:
|
|
postgresql:
|
|
auth:
|
|
postgresPassword: ${postgresql_password}
|
|
username: ${username}
|
|
password: ${password}
|
|
database: ${database}
|
|
replicationPassword: ${replication_password}
|
|
architecture: "replication"
|
|
replication:
|
|
synchronousCommit: "on"
|
|
numSynchronousReplicas: 1
|
|
applicationName: "postgresqlReplication"
|
|
primary:
|
|
podSecurityContext:
|
|
fsGroup: 1000
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
podLabels:
|
|
name: "postgresql-primary"
|
|
persistence:
|
|
existingClaim: postgresql-primary-pvc
|
|
selector:
|
|
matchLabels:
|
|
name: postgresql-primary-pvc
|
|
readReplicas:
|
|
name: "replica"
|
|
podSecurityContext:
|
|
fsGroup: 1000
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
podLabels:
|
|
name: "postgresql-replica"
|
|
persistence:
|
|
existingClaim: postgresql-replica-pvc
|
|
selector:
|
|
matchLabels:
|
|
name: postgresql-replica-pvc
|
|
|
|
|
|
|
|
|
|
controller:
|
|
spec:
|
|
template:
|
|
spec:
|
|
containers:
|
|
volumeMounts:
|
|
- mountPath: /bitnami/postgresql
|
|
name: postgresql-volume
|
|
readOnly: false
|
|
volumes:
|
|
- name: postgresql-volume
|
|
hostPath:
|
|
path: /mnt/nfs/AppData/postgresql
|
|
type: Directory |