init

clusters/cl01tl/platform/pgadmin/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: pgadmin4
+version: 0.0.3
+sources:
+  - https://github.com/pgadmin-org/pgadmin4
+  - https://github.com/rowanruseler/helm-charts
+dependencies:
+  - name: pgadmin4
+    version: 1.25.1
+    repository: https://helm.runix.net
+appVersion: "8.4"

clusters/cl01tl/platform/pgadmin/templates/external-secret.yaml

@@ -0,0 +1,62 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: pgadmin-password-secret
+  namespace: {{ .Release.Namespace | quote }}
+  labels:
+    app.kubernetes.io/name: {{ .Release.Name | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name | quote }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: pgadmin-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /pgadmin/auth
+        metadataPolicy: None
+        property: pgadmin-password
+
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: pgadmin-env-secret
+  namespace: {{ .Release.Namespace | quote }}
+  labels:
+    app.kubernetes.io/name: {{ .Release.Name | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name | quote }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: PGADMIN_CONFIG_AUTHENTICATION_SOURCES
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /pgadmin/env
+        metadataPolicy: None
+        property: PGADMIN_CONFIG_AUTHENTICATION_SOURCES
+    - secretKey: PGADMIN_CONFIG_OAUTH2_AUTO_CREATE_USER
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /pgadmin/env
+        metadataPolicy: None
+        property: PGADMIN_CONFIG_OAUTH2_AUTO_CREATE_USER
+    - secretKey: PGADMIN_CONFIG_OAUTH2_CONFIG
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /pgadmin/env
+        metadataPolicy: None
+        property: PGADMIN_CONFIG_OAUTH2_CONFIG

clusters/cl01tl/platform/pgadmin/values.yaml

@@ -0,0 +1,40 @@
+pgadmin4:
+  image:
+    repository: dpage/pgadmin4
+    tag: "8.6"
+  serviceAccount:
+    create: true
+    automountServiceAccountToken: true
+  strategy:
+    type: Recreate    
+  serverDefinitions:
+    enabled: false
+  ingress:
+    enabled: true
+    ingressClassName: traefik
+    annotations:
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      traefik.ingress.kubernetes.io/router.tls: "true"
+      cert-manager.io/cluster-issuer: letsencrypt-issuer
+    hosts:
+      - host: pgadmin.alexlebens.net
+        paths:
+          - path: /
+            pathType: Prefix
+    tls:
+      - secretName: pgadmin-secret-tls
+        hosts:
+          - pgadmin.alexlebens.net
+  existingSecret: pgadmin-password-secret
+  secretKeys:
+    pgadminPasswordKey: pgadmin-password
+  env:
+    email: alexanderlebens@gmail.com
+  envVarsFromSecrets:
+    - pgadmin-env-secret
+  persistentVolume:
+    enabled: true
+    accessModes:
+      - ReadWriteOnce
+    size: 5Gi
+    storageClass: ceph-block