3 Commits

Author SHA1 Message Date
7aa504ec63 chore(deps): update helm release cilium to v1.19.0
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 44s
2026-02-06 04:39:49 +00:00
eae4f059ba fix: fix path
All checks were successful
lint-test-helm / lint-helm (push) Successful in 15s
renovate / renovate (push) Successful in 1m35s
render-manifests-push / render-manifests-push (push) Successful in 1m44s
2026-02-05 22:38:07 -06:00
008845d653 fix: ensure ferret user
Some checks failed
lint-test-helm / lint-helm (push) Successful in 23s
render-manifests-push / render-manifests-push (push) Successful in 1m4s
renovate / renovate (push) Has been cancelled
2026-02-05 22:35:53 -06:00
3 changed files with 27 additions and 6 deletions

View File

@@ -3,4 +3,4 @@ dependencies:
repository: https://helm.cilium.io/
version: 1.19.0
digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
generated: "2026-02-06T04:28:04.257103528Z"
generated: "2026-02-06T04:39:45.698412831Z"

View File

@@ -47,3 +47,26 @@ spec:
key: /authentik/oidc/komodo
metadataPolicy: None
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: komodo-postgresql-17-fdb-cluster-ferret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster-ferret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: uri
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/ferret
metadataPolicy: None
property: uri

View File

@@ -53,10 +53,7 @@ komodo:
- name: PERIPHERY_SSL_ENABLED
value: false
- name: DB_USERNAME
valueFrom:
secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-app
key: user
value: ferret
- name: DB_PASSWORD
valueFrom:
secretKeyRef:
@@ -101,7 +98,7 @@ komodo:
- name: FERRETDB_POSTGRESQL_URL
valueFrom:
secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-superuser
name: komodo-postgresql-17-fdb-cluster-ferret
key: uri
resources:
requests:
@@ -201,6 +198,7 @@ postgresql-17-fdb-cluster:
postInitApplicationSQL:
- CREATE EXTENSION IF NOT EXISTS pg_cron;
- CREATE EXTENSION IF NOT EXISTS documentdb CASCADE;
- ALTER USER ferret WITH PASSWORD '${PASSWORD}';
- GRANT documentdb_admin_role TO ferret;
- GRANT USAGE ON SCHEMA documentdb_core TO ferret;
- GRANT USAGE ON SCHEMA documentdb_api TO ferret;