Merge pull request 'Automated Manifest Update' (#5591) from auto/update-manifests into manifests

Reviewed-on: #5591
2026-04-06 04:09:25 +00:00
parent 67d87280cb 54d601bd1f
commit 6af95a8b1f
11 changed files with 75 additions and 79 deletions
--- a/clusters/cl01tl/manifests/elastic-operator/ConfigMap-elastic-operator.yaml
+++ b/clusters/cl01tl/manifests/elastic-operator/ConfigMap-elastic-operator.yaml
@@ -31,7 +31,7 @@ data:
    enable-webhook: true
    webhook-name: elastic-operator.elastic-operator.k8s.elastic.co
    webhook-port: 9443
-    namespaces: [postiz,stalwart,tubearchivist]
+    namespaces: [stalwart,tubearchivist]
    operator-namespace: elastic-operator
    enable-leader-election: true
    elasticsearch-observation-interval: 10s
--- a/clusters/cl01tl/manifests/elastic-operator/StatefulSet-elastic-operator.yaml
+++ b/clusters/cl01tl/manifests/elastic-operator/StatefulSet-elastic-operator.yaml
@@ -20,7 +20,7 @@ spec:
    metadata:
      annotations:
        "co.elastic.logs/raw": "[{\"type\":\"filestream\",\"enabled\":true,\"id\":\"eck-container-logs-${data.kubernetes.container.id}\",\"paths\":[\"/var/log/containers/*${data.kubernetes.container.id}.log\"],\"parsers\":[{\"container\":{}},{\"ndjson\":{\"keys_under_root\":true}}],\"prospector.scanner.symlinks\":true,\"processors\":[{\"convert\":{\"mode\":\"rename\",\"ignore_missing\":true,\"fields\":[{\"from\":\"error\",\"to\":\"_error\"}]}},{\"convert\":{\"mode\":\"rename\",\"ignore_missing\":true,\"fields\":[{\"from\":\"_error\",\"to\":\"error.message\"}]}},{\"convert\":{\"mode\":\"rename\",\"ignore_missing\":true,\"fields\":[{\"from\":\"source\",\"to\":\"_source\"}]}},{\"convert\":{\"mode\":\"rename\",\"ignore_missing\":true,\"fields\":[{\"from\":\"_source\",\"to\":\"event.source\"}]}}]}]"
-        "checksum/config": e71295ba781ca3bc6d4f99145aa7b103c25227a320eb2f5914eb9d60dc0f51c2
+        "checksum/config": 15d5acbaf534c61de655db1042d2c8a173621b080c443dbc5e0e6566bab0ac63
      labels:
        app.kubernetes.io/name: elastic-operator
        app.kubernetes.io/instance: elastic-operator
--- a/clusters/cl01tl/manifests/postiz/ConfigMap-postiz-temporal-config.yaml
+++ b/clusters/cl01tl/manifests/postiz/ConfigMap-postiz-temporal-config.yaml
@@ -30,16 +30,16 @@ data:
              enabled: false
            user: postgres
        visibility:
-          elasticsearch:
-            indices:
-              visibility: temporal_visibility_v1
-            logLevel: error
+          sql:
+            connectAddr: postiz-postgresql-18-cluster-rw.postiz:5432
+            connectProtocol: tcp
+            databaseName: temporal_visibility
+            driverName: postgres12
+            password: {{ env "TEMPORAL_VISIBILITY_STORE_PASSWORD" | quote }}
+            pluginName: postgres12
            tls:
              enabled: false
-            url:
-              host: elasticsearch-postiz-es-http.postiz:9200
-              scheme: https
-            version: v8
+            user: postgres
      defaultStore: default
      numHistoryShards: 512
      visibilityStore: visibility
--- a/clusters/cl01tl/manifests/postiz/Database-postiz-postgresql-18-database-temporal-visibility.yaml
+++ b/clusters/cl01tl/manifests/postiz/Database-postiz-postgresql-18-database-temporal-visibility.yaml
@@ -0,0 +1,21 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: postiz-postgresql-18-database-temporal-visibility
+  namespace: postiz
+  labels:
+    app.kubernetes.io/name: postiz-postgresql-18-database-temporal-visibility
+    helm.sh/chart: postgres-18-cluster-7.11.2
+    app.kubernetes.io/instance: postiz
+    app.kubernetes.io/part-of: postiz
+    app.kubernetes.io/version: "7.11.2"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  name: temporal_visibility
+  cluster:
+    name: postiz-postgresql-18-cluster
+  ensure: present
+  owner: app
+  template: template1
+  encoding: UTF8
+  databaseReclaimPolicy: retain
--- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-frontend.yaml
+++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-frontend.yaml
@@ -21,7 +21,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/config: db197bc57bee0176e47d826ee5b8be299b1725da9be2d33c9ef7b35dd0f2ebf6
+        checksum/config: d82ae4d31b0737e766e03b0b67a03c687f4e6a36d874bac5f02ecad33eade5fb
        prometheus.io/job: temporal-frontend
        prometheus.io/scrape: 'true'
        prometheus.io/scheme: http
@@ -62,7 +62,7 @@ spec:
            - name: TEMPORAL_VISIBILITY_STORE_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: postiz-temporal-visibility-store
+                  name: postiz-postgresql-18-cluster-superuser
                  key: password
          ports:
            - name: rpc
--- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-history.yaml
+++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-history.yaml
@@ -21,7 +21,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/config: db197bc57bee0176e47d826ee5b8be299b1725da9be2d33c9ef7b35dd0f2ebf6
+        checksum/config: d82ae4d31b0737e766e03b0b67a03c687f4e6a36d874bac5f02ecad33eade5fb
        prometheus.io/job: temporal-history
        prometheus.io/scrape: 'true'
        prometheus.io/scheme: http
@@ -62,7 +62,7 @@ spec:
            - name: TEMPORAL_VISIBILITY_STORE_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: postiz-temporal-visibility-store
+                  name: postiz-postgresql-18-cluster-superuser
                  key: password
          ports:
            - name: rpc
--- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-matching.yaml
+++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-matching.yaml
@@ -21,7 +21,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/config: db197bc57bee0176e47d826ee5b8be299b1725da9be2d33c9ef7b35dd0f2ebf6
+        checksum/config: d82ae4d31b0737e766e03b0b67a03c687f4e6a36d874bac5f02ecad33eade5fb
        prometheus.io/job: temporal-matching
        prometheus.io/scrape: 'true'
        prometheus.io/scheme: http
@@ -62,7 +62,7 @@ spec:
            - name: TEMPORAL_VISIBILITY_STORE_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: postiz-temporal-visibility-store
+                  name: postiz-postgresql-18-cluster-superuser
                  key: password
          ports:
            - name: rpc
--- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-worker.yaml
+++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-worker.yaml
@@ -21,7 +21,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/config: db197bc57bee0176e47d826ee5b8be299b1725da9be2d33c9ef7b35dd0f2ebf6
+        checksum/config: d82ae4d31b0737e766e03b0b67a03c687f4e6a36d874bac5f02ecad33eade5fb
        prometheus.io/job: temporal-worker
        prometheus.io/scrape: 'true'
        prometheus.io/scheme: http
@@ -62,7 +62,7 @@ spec:
            - name: TEMPORAL_VISIBILITY_STORE_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: postiz-temporal-visibility-store
+                  name: postiz-postgresql-18-cluster-superuser
                  key: password
          ports:
            - name: membership
--- a/clusters/cl01tl/manifests/postiz/Elasticsearch-elasticsearch-postiz.yaml
+++ b/clusters/cl01tl/manifests/postiz/Elasticsearch-elasticsearch-postiz.yaml
@@ -1,29 +0,0 @@
-apiVersion: elasticsearch.k8s.elastic.co/v1
-kind: Elasticsearch
-metadata:
-  name: elasticsearch-postiz
-  namespace: postiz
-  labels:
-    app.kubernetes.io/name: elasticsearch-postiz
-    app.kubernetes.io/instance: postiz
-    app.kubernetes.io/part-of: postiz
-spec:
-  version: 8.19.8
-  auth:
-    fileRealm:
-      - secretName: postiz-elasticsearch-secret
-  nodeSets:
-    - name: default
-      count: 2
-      config:
-        node.store.allow_mmap: false
-      volumeClaimTemplates:
-        - metadata:
-            name: elasticsearch-data
-          spec:
-            accessModes:
-              - ReadWriteOnce
-            resources:
-              requests:
-                storage: 5Gi
-            storageClassName: ceph-block
--- a/clusters/cl01tl/manifests/postiz/Job-postiz-temporal-schema-1-0-0-rc-3-1.yaml
+++ b/clusters/cl01tl/manifests/postiz/Job-postiz-temporal-schema-1-0-0-rc-3-1.yaml
@@ -78,33 +78,51 @@ spec:
            - name: shims
              mountPath: /usr/local/sbin/temporal-elasticsearch-tool
              subPath: temporal-elasticsearch-tool
+        - name: create-visibility-store
+          image: "temporalio/admin-tools:1.30.3@sha256:2c2272b008f1af295b3719963e6feeef64f838d1105d895cf6acfcf96dd31741"
+          imagePullPolicy: IfNotPresent
+          command: ['temporal-sql-tool', 'create-database']
+          env:
+            - name: SQL_PLUGIN
+              value: postgres12
+            - name: SQL_HOST
+              value: postiz-postgresql-18-cluster-rw.postiz
+            - name: SQL_PORT
+              value: "5432"
+            - name: SQL_DATABASE
+              value: temporal_visibility
+            - name: SQL_USER
+              value: "postgres"
+            - name: SQL_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: postiz-postgresql-18-cluster-superuser
+                  key: password
+            - name: SQL_TLS
+              value: "false"
        - name: manage-schema-visibility-store
          image: "temporalio/admin-tools:1.30.3@sha256:2c2272b008f1af295b3719963e6feeef64f838d1105d895cf6acfcf96dd31741"
          imagePullPolicy: IfNotPresent
          command: ['sh', '-c']
          args:
-            - temporal-elasticsearch-tool setup-schema && temporal-elasticsearch-tool create-index && temporal-elasticsearch-tool update-schema --index "$ES_VISIBILITY_INDEX"
+            - temporal-sql-tool setup-schema -v 0.0 && temporal-sql-tool update-schema --schema-dir /etc/temporal/schema/postgresql/v12/visibility/versioned
          env:
-            - name: ES_SCHEME
-              value: https
-            - name: ES_HOST
-              value: elasticsearch-postiz-es-http.postiz
-            - name: ES_PORT
-              value: "9200"
-            - name: ES_SERVER
-              value: https://elasticsearch-postiz-es-http.postiz:9200
-            - name: ES_USER
-              value:
-            - name: ES_PWD
+            - name: SQL_PLUGIN
+              value: postgres12
+            - name: SQL_HOST
+              value: postiz-postgresql-18-cluster-rw.postiz
+            - name: SQL_PORT
+              value: "5432"
+            - name: SQL_DATABASE
+              value: temporal_visibility
+            - name: SQL_USER
+              value: "postgres"
+            - name: SQL_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: postiz-temporal-visibility-store
+                  name: postiz-postgresql-18-cluster-superuser
                  key: password
-            - name: ES_VERSION
-              value: v8
-            - name: ES_VISIBILITY_INDEX
-              value: temporal_visibility_v1
-            - name: ES_TLS
+            - name: SQL_TLS
              value: "false"
          volumeMounts:
            - name: shims
--- a/clusters/cl01tl/manifests/postiz/Secret-postiz-temporal-visibility-store.yaml
+++ b/clusters/cl01tl/manifests/postiz/Secret-postiz-temporal-visibility-store.yaml
@@ -1,14 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: postiz-temporal-visibility-store
-  labels:
-    app.kubernetes.io/name: temporal
-    helm.sh/chart: temporal-1.0.0-rc.3
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/instance: postiz
-    app.kubernetes.io/version: "1.30.2"
-    app.kubernetes.io/part-of: temporal
-type: Opaque
-data:
-  password: ""