3 Commits

Author SHA1 Message Date
7aa504ec63 chore(deps): update helm release cilium to v1.19.0
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 44s
2026-02-06 04:39:49 +00:00
eae4f059ba fix: fix path
All checks were successful
lint-test-helm / lint-helm (push) Successful in 15s
renovate / renovate (push) Successful in 1m35s
render-manifests-push / render-manifests-push (push) Successful in 1m44s
2026-02-05 22:38:07 -06:00
008845d653 fix: ensure ferret user
Some checks failed
lint-test-helm / lint-helm (push) Successful in 23s
render-manifests-push / render-manifests-push (push) Successful in 1m4s
renovate / renovate (push) Has been cancelled
2026-02-05 22:35:53 -06:00
4 changed files with 30 additions and 9 deletions

View File

@@ -1,6 +1,6 @@
dependencies: dependencies:
- name: cilium - name: cilium
repository: https://helm.cilium.io/ repository: https://helm.cilium.io/
version: 1.18.6 version: 1.19.0
digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
generated: "2026-02-05T12:00:20.15778-06:00" generated: "2026-02-06T04:39:45.698412831Z"

View File

@@ -15,7 +15,7 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: cilium - name: cilium
version: 1.18.6 version: 1.19.0
repository: https://helm.cilium.io/ repository: https://helm.cilium.io/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
# renovate: datasource=github-releases depName=cilium/cilium # renovate: datasource=github-releases depName=cilium/cilium

View File

@@ -47,3 +47,26 @@ spec:
key: /authentik/oidc/komodo key: /authentik/oidc/komodo
metadataPolicy: None metadataPolicy: None
property: secret property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: komodo-postgresql-17-fdb-cluster-ferret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster-ferret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: uri
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/ferret
metadataPolicy: None
property: uri

View File

@@ -53,10 +53,7 @@ komodo:
- name: PERIPHERY_SSL_ENABLED - name: PERIPHERY_SSL_ENABLED
value: false value: false
- name: DB_USERNAME - name: DB_USERNAME
valueFrom: value: ferret
secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-app
key: user
- name: DB_PASSWORD - name: DB_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
@@ -101,7 +98,7 @@ komodo:
- name: FERRETDB_POSTGRESQL_URL - name: FERRETDB_POSTGRESQL_URL
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-superuser name: komodo-postgresql-17-fdb-cluster-ferret
key: uri key: uri
resources: resources:
requests: requests:
@@ -201,6 +198,7 @@ postgresql-17-fdb-cluster:
postInitApplicationSQL: postInitApplicationSQL:
- CREATE EXTENSION IF NOT EXISTS pg_cron; - CREATE EXTENSION IF NOT EXISTS pg_cron;
- CREATE EXTENSION IF NOT EXISTS documentdb CASCADE; - CREATE EXTENSION IF NOT EXISTS documentdb CASCADE;
- ALTER USER ferret WITH PASSWORD '${PASSWORD}';
- GRANT documentdb_admin_role TO ferret; - GRANT documentdb_admin_role TO ferret;
- GRANT USAGE ON SCHEMA documentdb_core TO ferret; - GRANT USAGE ON SCHEMA documentdb_core TO ferret;
- GRANT USAGE ON SCHEMA documentdb_api TO ferret; - GRANT USAGE ON SCHEMA documentdb_api TO ferret;