clusters/cl01tl/manifests/postiz/Cluster-postiz-postgresql-18-cluster.yaml

@@ -34,7 +34,7 @@ spec:
   primaryUpdateMethod: switchover
   primaryUpdateStrategy: unsupervised
   logLevel: info
-  enableSuperuserAccess: false
+  enableSuperuserAccess: true
   enablePDB: true
   postgresql:
     parameters:

clusters/cl01tl/manifests/postiz/ConfigMap-postiz-temporal-config.yaml

@@ -28,7 +28,7 @@ data:
             pluginName: postgres12
             tls:
               enabled: false
-            user: app
+            user: postgres
         visibility:
           elasticsearch:
             indices:

clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-frontend.yaml

@@ -21,7 +21,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: 154a4227ee38756d00e6e9a86ae9a6a3948bb41a5fa70f40185440d0fc96a25d
+        checksum/config: 09a0bd71567ad79ae3b514b4ce1c9ffadb297dfa4485541ea8d13e4c5e9c531c
         prometheus.io/job: temporal-frontend
         prometheus.io/scrape: 'true'
         prometheus.io/scheme: http
@@ -57,7 +57,7 @@ spec:
             - name: TEMPORAL_DEFAULT_STORE_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: postiz-postgresql-18-cluster-app
+                  name: postiz-postgresql-18-cluster-superuser
                   key: password
             - name: TEMPORAL_VISIBILITY_STORE_PASSWORD
               valueFrom:

clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-history.yaml

@@ -21,7 +21,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: 154a4227ee38756d00e6e9a86ae9a6a3948bb41a5fa70f40185440d0fc96a25d
+        checksum/config: 09a0bd71567ad79ae3b514b4ce1c9ffadb297dfa4485541ea8d13e4c5e9c531c
         prometheus.io/job: temporal-history
         prometheus.io/scrape: 'true'
         prometheus.io/scheme: http
@@ -57,7 +57,7 @@ spec:
             - name: TEMPORAL_DEFAULT_STORE_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: postiz-postgresql-18-cluster-app
+                  name: postiz-postgresql-18-cluster-superuser
                   key: password
             - name: TEMPORAL_VISIBILITY_STORE_PASSWORD
               valueFrom:

clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-matching.yaml

@@ -21,7 +21,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: 154a4227ee38756d00e6e9a86ae9a6a3948bb41a5fa70f40185440d0fc96a25d
+        checksum/config: 09a0bd71567ad79ae3b514b4ce1c9ffadb297dfa4485541ea8d13e4c5e9c531c
         prometheus.io/job: temporal-matching
         prometheus.io/scrape: 'true'
         prometheus.io/scheme: http
@@ -57,7 +57,7 @@ spec:
             - name: TEMPORAL_DEFAULT_STORE_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: postiz-postgresql-18-cluster-app
+                  name: postiz-postgresql-18-cluster-superuser
                   key: password
             - name: TEMPORAL_VISIBILITY_STORE_PASSWORD
               valueFrom:

clusters/cl01tl/manifests/postiz/Deployment-postiz-temporal-worker.yaml

@@ -21,7 +21,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: 154a4227ee38756d00e6e9a86ae9a6a3948bb41a5fa70f40185440d0fc96a25d
+        checksum/config: 09a0bd71567ad79ae3b514b4ce1c9ffadb297dfa4485541ea8d13e4c5e9c531c
         prometheus.io/job: temporal-worker
         prometheus.io/scrape: 'true'
         prometheus.io/scheme: http
@@ -57,7 +57,7 @@ spec:
             - name: TEMPORAL_DEFAULT_STORE_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: postiz-postgresql-18-cluster-app
+                  name: postiz-postgresql-18-cluster-superuser
                   key: password
             - name: TEMPORAL_VISIBILITY_STORE_PASSWORD
               valueFrom:

clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-elasticsearch-secret.yaml

@@ -0,0 +1,26 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: postiz-elasticsearch-secret
+  namespace: postiz
+  labels:
+    app.kubernetes.io/name: postiz-elasticsearch-secret
+    app.kubernetes.io/instance: postiz
+    app.kubernetes.io/part-of: postiz
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: username
+      remoteRef:
+        key: /cl01tl/postiz/elasticsearch
+        property: username
+    - secretKey: password
+      remoteRef:
+        key: /cl01tl/postiz/elasticsearch
+        property: password
+    - secretKey: roles
+      remoteRef:
+        key: /cl01tl/postiz/elasticsearch
+        property: roles

clusters/cl01tl/manifests/postiz/Job-postiz-temporal-schema-1-0-0-rc-3-1.yaml

@@ -42,11 +42,11 @@ spec:
             - name: SQL_DATABASE
               value: app
             - name: SQL_USER
-              value: "app"
+              value: "postgres"
             - name: SQL_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: postiz-postgresql-18-cluster-app
+                  name: postiz-postgresql-18-cluster-superuser
                   key: password
             - name: SQL_TLS
               value: "false"
@@ -66,11 +66,11 @@ spec:
             - name: SQL_DATABASE
               value: app
             - name: SQL_USER
-              value: "app"
+              value: "postgres"
             - name: SQL_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: postiz-postgresql-18-cluster-app
+                  name: postiz-postgresql-18-cluster-superuser
                   key: password
             - name: SQL_TLS
               value: "false"