From b7c811e747c31359eab22b5795e398dab644e4ad Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Mon, 6 Apr 2026 03:19:16 +0000 Subject: [PATCH] chore: Update manifests after change --- .../Cluster-postiz-postgresql-18-cluster.yaml | 2 +- .../ConfigMap-postiz-temporal-config.yaml | 2 +- .../Deployment-postiz-temporal-frontend.yaml | 4 +-- .../Deployment-postiz-temporal-history.yaml | 4 +-- .../Deployment-postiz-temporal-matching.yaml | 4 +-- .../Deployment-postiz-temporal-worker.yaml | 4 +-- ...nalSecret-postiz-elasticsearch-secret.yaml | 26 +++++++++++++++++++ ...b-postiz-temporal-schema-1-0-0-rc-3-1.yaml | 8 +++--- 8 files changed, 40 insertions(+), 14 deletions(-) create mode 100644 clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-elasticsearch-secret.yaml diff --git a/clusters/cl01tl/manifests/postiz/Cluster-postiz-postgresql-18-cluster.yaml b/clusters/cl01tl/manifests/postiz/Cluster-postiz-postgresql-18-cluster.yaml index bb17001c3..42e776c79 100644 --- a/clusters/cl01tl/manifests/postiz/Cluster-postiz-postgresql-18-cluster.yaml +++ b/clusters/cl01tl/manifests/postiz/Cluster-postiz-postgresql-18-cluster.yaml @@ -34,7 +34,7 @@ spec: primaryUpdateMethod: switchover primaryUpdateStrategy: unsupervised logLevel: info - enableSuperuserAccess: false + enableSuperuserAccess: true enablePDB: true postgresql: parameters: diff --git a/clusters/cl01tl/manifests/postiz/ConfigMap-postiz-temporal-config.yaml b/clusters/cl01tl/manifests/postiz/ConfigMap-postiz-temporal-config.yaml index 546fa56f7..91e64e56c 100644 --- a/clusters/cl01tl/manifests/postiz/ConfigMap-postiz-temporal-config.yaml +++ b/clusters/cl01tl/manifests/postiz/ConfigMap-postiz-temporal-config.yaml @@ -28,7 +28,7 @@ data: pluginName: postgres12 tls: enabled: false - user: app + user: postgres visibility: elasticsearch: indices: diff --git a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-frontend.yaml b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-frontend.yaml index 311f27c40..360734077 100644 --- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-frontend.yaml +++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-frontend.yaml @@ -21,7 +21,7 @@ spec: template: metadata: annotations: - checksum/config: 154a4227ee38756d00e6e9a86ae9a6a3948bb41a5fa70f40185440d0fc96a25d + checksum/config: 09a0bd71567ad79ae3b514b4ce1c9ffadb297dfa4485541ea8d13e4c5e9c531c prometheus.io/job: temporal-frontend prometheus.io/scrape: 'true' prometheus.io/scheme: http @@ -57,7 +57,7 @@ spec: - name: TEMPORAL_DEFAULT_STORE_PASSWORD valueFrom: secretKeyRef: - name: postiz-postgresql-18-cluster-app + name: postiz-postgresql-18-cluster-superuser key: password - name: TEMPORAL_VISIBILITY_STORE_PASSWORD valueFrom: diff --git a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-history.yaml b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-history.yaml index 5361803f8..943f9b9d9 100644 --- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-history.yaml +++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-history.yaml @@ -21,7 +21,7 @@ spec: template: metadata: annotations: - checksum/config: 154a4227ee38756d00e6e9a86ae9a6a3948bb41a5fa70f40185440d0fc96a25d + checksum/config: 09a0bd71567ad79ae3b514b4ce1c9ffadb297dfa4485541ea8d13e4c5e9c531c prometheus.io/job: temporal-history prometheus.io/scrape: 'true' prometheus.io/scheme: http @@ -57,7 +57,7 @@ spec: - name: TEMPORAL_DEFAULT_STORE_PASSWORD valueFrom: secretKeyRef: - name: postiz-postgresql-18-cluster-app + name: postiz-postgresql-18-cluster-superuser key: password - name: TEMPORAL_VISIBILITY_STORE_PASSWORD valueFrom: diff --git a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-matching.yaml b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-matching.yaml index b4192d70b..acbc1a3ba 100644 --- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-matching.yaml +++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-matching.yaml @@ -21,7 +21,7 @@ spec: template: metadata: annotations: - checksum/config: 154a4227ee38756d00e6e9a86ae9a6a3948bb41a5fa70f40185440d0fc96a25d + checksum/config: 09a0bd71567ad79ae3b514b4ce1c9ffadb297dfa4485541ea8d13e4c5e9c531c prometheus.io/job: temporal-matching prometheus.io/scrape: 'true' prometheus.io/scheme: http @@ -57,7 +57,7 @@ spec: - name: TEMPORAL_DEFAULT_STORE_PASSWORD valueFrom: secretKeyRef: - name: postiz-postgresql-18-cluster-app + name: postiz-postgresql-18-cluster-superuser key: password - name: TEMPORAL_VISIBILITY_STORE_PASSWORD valueFrom: diff --git a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-worker.yaml b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-worker.yaml index e5874c985..e8e3eb21a 100644 --- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-worker.yaml +++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-worker.yaml @@ -21,7 +21,7 @@ spec: template: metadata: annotations: - checksum/config: 154a4227ee38756d00e6e9a86ae9a6a3948bb41a5fa70f40185440d0fc96a25d + checksum/config: 09a0bd71567ad79ae3b514b4ce1c9ffadb297dfa4485541ea8d13e4c5e9c531c prometheus.io/job: temporal-worker prometheus.io/scrape: 'true' prometheus.io/scheme: http @@ -57,7 +57,7 @@ spec: - name: TEMPORAL_DEFAULT_STORE_PASSWORD valueFrom: secretKeyRef: - name: postiz-postgresql-18-cluster-app + name: postiz-postgresql-18-cluster-superuser key: password - name: TEMPORAL_VISIBILITY_STORE_PASSWORD valueFrom: diff --git a/clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-elasticsearch-secret.yaml b/clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-elasticsearch-secret.yaml new file mode 100644 index 000000000..2ac043e05 --- /dev/null +++ b/clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-elasticsearch-secret.yaml @@ -0,0 +1,26 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: postiz-elasticsearch-secret + namespace: postiz + labels: + app.kubernetes.io/name: postiz-elasticsearch-secret + app.kubernetes.io/instance: postiz + app.kubernetes.io/part-of: postiz +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: username + remoteRef: + key: /cl01tl/postiz/elasticsearch + property: username + - secretKey: password + remoteRef: + key: /cl01tl/postiz/elasticsearch + property: password + - secretKey: roles + remoteRef: + key: /cl01tl/postiz/elasticsearch + property: roles diff --git a/clusters/cl01tl/manifests/postiz/Job-postiz-temporal-schema-1-0-0-rc-3-1.yaml b/clusters/cl01tl/manifests/postiz/Job-postiz-temporal-schema-1-0-0-rc-3-1.yaml index 33a9d5a89..b029c80e3 100644 --- a/clusters/cl01tl/manifests/postiz/Job-postiz-temporal-schema-1-0-0-rc-3-1.yaml +++ b/clusters/cl01tl/manifests/postiz/Job-postiz-temporal-schema-1-0-0-rc-3-1.yaml @@ -42,11 +42,11 @@ spec: - name: SQL_DATABASE value: app - name: SQL_USER - value: "app" + value: "postgres" - name: SQL_PASSWORD valueFrom: secretKeyRef: - name: postiz-postgresql-18-cluster-app + name: postiz-postgresql-18-cluster-superuser key: password - name: SQL_TLS value: "false" @@ -66,11 +66,11 @@ spec: - name: SQL_DATABASE value: app - name: SQL_USER - value: "app" + value: "postgres" - name: SQL_PASSWORD valueFrom: secretKeyRef: - name: postiz-postgresql-18-cluster-app + name: postiz-postgresql-18-cluster-superuser key: password - name: SQL_TLS value: "false"