From f4fedca06901af7e00bcf7ca7572231ac1ff7a85 Mon Sep 17 00:00:00 2001
From: Alex Lebens <alexanderlebens@gmail.com>
Date: Sun, 22 Dec 2024 23:32:35 -0600
Subject: [PATCH] add pg-17

---
 .../cl01tl/applications/penpot/Chart.yaml     |  6 +++-
 .../penpot/templates/external-secret.yaml     | 32 +++++++++++++++++++
 .../cl01tl/applications/penpot/values.yaml    | 30 +++++++++++++++++
 3 files changed, 67 insertions(+), 1 deletion(-)

diff --git a/clusters/cl01tl/applications/penpot/Chart.yaml b/clusters/cl01tl/applications/penpot/Chart.yaml
index e2d8babc0..a535f4353 100644
--- a/clusters/cl01tl/applications/penpot/Chart.yaml
+++ b/clusters/cl01tl/applications/penpot/Chart.yaml
@@ -32,7 +32,11 @@ dependencies:
     repository: https://charts.bitnami.com/bitnami
   - name: postgres-cluster
     alias: postgres-16-cluster
-    version: 3.19.0
+    version: 3.21.0
+    repository: http://alexlebens.github.io/helm-charts
+  - name: postgres-cluster
+    alias: postgres-17-cluster
+    version: 3.21.0
     repository: http://alexlebens.github.io/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/penpot.png
 appVersion: 2.3.3
diff --git a/clusters/cl01tl/applications/penpot/templates/external-secret.yaml b/clusters/cl01tl/applications/penpot/templates/external-secret.yaml
index 9962af96b..ff402bf56 100644
--- a/clusters/cl01tl/applications/penpot/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/penpot/templates/external-secret.yaml
@@ -227,3 +227,35 @@ spec:
         key: /digital-ocean/home-infra/postgres-backups
         metadataPolicy: None
         property: secret
+
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: penpot-postgresql-17-cluster-backup-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: penpot-postgresql-17-cluster-backup-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: database
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/postgres-backups
+        metadataPolicy: None
+        property: access
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/postgres-backups
+        metadataPolicy: None
+        property: secret
diff --git a/clusters/cl01tl/applications/penpot/values.yaml b/clusters/cl01tl/applications/penpot/values.yaml
index 00be29dc7..779fa5e4f 100644
--- a/clusters/cl01tl/applications/penpot/values.yaml
+++ b/clusters/cl01tl/applications/penpot/values.yaml
@@ -405,3 +405,33 @@ postgres-16-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/penpot/penpot-postgresql-16-cluster
     endpointCredentials: penpot-postgresql-16-cluster-backup-secret
     backupIndex: 1
+postgres-17-cluster:
+  mode: replica
+  cluster:
+    image:
+      repository: ghcr.io/cloudnative-pg/postgresql
+      tag: "17.2-22"
+    walStorage:
+      storageClass: local-path
+    storage:
+      storageClass: local-path
+    monitoring:
+      enabled: true
+  replica:
+    importType: microservice
+    importDatabases:
+      - app
+    externalCluster:
+      connectionParameters:
+        host: argo-workflows-postgresql-16-cluster-rw
+        user: app
+        dbname: app
+      password:
+        name: argo-workflows-postgresql-16-cluster-app
+        key: password
+  backup:
+    enabled: false
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/penpot/penpot-postgresql-16-cluster
+    endpointCredentials: penpot-postgresql-16-cluster-backup-secret
+    backupIndex: 1