Merge pull request 'feat: use built in postgres' (#5765) from tmp/kyoo-3 into main

Reviewed-on: #5765

clusters/cl01tl/helm/kyoo/Chart.lock

@@ -2,11 +2,8 @@ dependencies:
 - name: kyoo
   repository: oci://ghcr.io/zoriya/helm-charts
   version: 5.0.0
-- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:0a5ba08e137471d788da07502db63f5be535c2843f5bfda74fb873a997846ded
+digest: sha256:46a986610568c2ca342db3bb34658eb0567f967dfee8dd8a317881103da0f6f9
-generated: "2026-04-08T21:04:05.245024-05:00"
+generated: "2026-04-09T14:23:43.657618-05:00"

clusters/cl01tl/helm/kyoo/Chart.yaml

@@ -22,10 +22,10 @@ dependencies:
   - name: kyoo
     repository: oci://ghcr.io/zoriya/helm-charts
     version: 5.0.0
-  - name: postgres-cluster
+  # - name: volsync-target
-    alias: postgres-18-cluster
+  #   alias: volsync-target-db
-    version: 7.11.2
+  #   version: 0.8.0
-    repository: oci://harbor.alexlebens.net/helm-charts
+  #   repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-metadata
     version: 0.8.0

clusters/cl01tl/helm/kyoo/templates/external-secret.yaml

@@ -29,6 +29,30 @@ spec:
         key: /tvdb/alexlebens
         property: api-key
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: kyoo-db-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: kyoo-db-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: postgres_user
+      remoteRef:
+        key: /cl01tl/kyoo/db
+        property: user
+    - secretKey: postgres_password
+      remoteRef:
+        key: /cl01tl/kyoo/db
+        property: password
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/kyoo/values.yaml

@@ -4,28 +4,14 @@ kyoo:
       fsGroup: 1000
       fsGroupChangePolicy: OnRootMismatch
     postgres:
+      infra:
+        user: kyoo_all
+        passwordKey: password
+        existingSecret: kyoo-db-secret
       shared:
-        host: kyoo-postgresql-18-cluster-rw
+        existingSecret: kyoo-db-secret
-        port: 5432
+        userKey: postgres_user
-        existingSecret: kyoo-postgresql-18-cluster-app
+        passwordKey: postgres_password
-        userKey: user
-        passwordKey: password
-      kyoo_api:
-        database: kyoo_api
-        sslmode: disable
-        kyoo_api:
-          userKey: user
-          passwordKey: password
-          existingSecret: kyoo-postgresql-18-cluster-superuser
-      kyoo_auth:
-        database: kyoo_auth
-        sslmode: disable
-      kyoo_scanner:
-        database: kyoo_scanner
-        sslmode: disable
-      kyoo_transcoder:
-        database: kyoo_transcoder
-        sslmode: disable
   kyoo:
     address: https://kyoo.alexlebens.net
     auth:
@@ -175,41 +161,21 @@ kyoo:
   traefikproxy:
     enabled: false
   postgres:
-    enabled: false
+    enabled: true
-postgres-18-cluster:
+    persistence:
-  mode: recovery
+      enabled: true
-  cluster:
+      size: 5Gi
-    enableSuperuserAccess: true
+volsync-target-db:
-  recovery:
+  pvcTarget: kyoo-db
-    method: objectStore
+  local:
-    objectStore:
+    enabled: true
-      index: 1
+    schedule: 26 8 * * *
-  backup:
+  remote:
-    objectStore:
+    enabled: true
-      - name: garage-local
+    schedule: 26 9 * * *
-        index: 1
+  external:
-        destinationBucket: postgres-backups
+    enabled: true
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
+    schedule: 26 10 * * *
-        isWALArchiver: true
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 5 14 * * *"
-        backupName: garage-local
-  databases:
-    - name: kyoo_api
-      ensure: present
-      owner: app
-    - name: kyoo_auth
-      ensure: present
-      owner: app
-    - name: kyoo_scanner
-      ensure: present
-      owner: app
-    - name: kyoo_transcoder
-      ensure: present
-      owner: app
 volsync-target-metadata:
   pvcTarget: kyoo-apimetadata
   local: