apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: kyoo-postgres
  namespace: kyoo
  labels:
    helm.sh/chart: postgres-0.12.4
    app.kubernetes.io/name: postgres
    app.kubernetes.io/instance: kyoo
    app.kubernetes.io/version: "18.1.0"
    app.kubernetes.io/managed-by: Helm
spec:
  replicas: 1
  serviceName: kyoo-postgres-headless
  updateStrategy:
    type: RollingUpdate
  selector:
    matchLabels:
      app.kubernetes.io/name: postgres
      app.kubernetes.io/instance: kyoo
  template:
    metadata:
      labels:
        helm.sh/chart: postgres-0.12.4
        app.kubernetes.io/name: postgres
        app.kubernetes.io/instance: kyoo
        app.kubernetes.io/version: "18.1.0"
        app.kubernetes.io/managed-by: Helm
    spec:
      serviceAccountName: default
      automountServiceAccountToken: false
      securityContext:
        fsGroup: 999
      containers:
        - name: postgres
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            readOnlyRootFilesystem: false
            runAsGroup: 999
            runAsNonRoot: true
            runAsUser: 999
          image: docker.io/postgres:18.1@sha256:5ec39c188013123927f30a006987c6b0e20f3ef2b54b140dfa96dac6844d883f
          imagePullPolicy: Always
          args:
            - -c
            - 'config_file=/etc/postgresql/postgresql.conf'
          env:
            - name: PGDATA
              value: /var/lib/postgresql/18/docker
            - name: POSTGRES_USER
              value: kyoo_all
            - name: POSTGRES_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: kyoo-db-secret
                  key: postgres_password
            - name: POSTGRES_MAX_CONNECTIONS
              value: "100"
          ports:
            - name: postgresql
              containerPort: 5432
              protocol: TCP
          livenessProbe:
            exec:
              command:
                - /bin/bash
                - -c
                - |
                  pg_isready -U kyoo_all -d postgres -h 127.0.0.1 -p 5432
            initialDelaySeconds: 30
            periodSeconds: 10
            timeoutSeconds: 5
            successThreshold: 1
            failureThreshold: 3
          readinessProbe:
            exec:
              command:
                - /bin/bash
                - -c
                - |
                  pg_isready -U kyoo_all -d postgres -h 127.0.0.1 -p 5432
            initialDelaySeconds: 5
            periodSeconds: 5
            timeoutSeconds: 5
            successThreshold: 1
            failureThreshold: 3
          startupProbe:
            exec:
              command:
                - /bin/bash
                - -c
                - |
                  pg_isready -U kyoo_all -d postgres -h 127.0.0.1 -p 5432
            initialDelaySeconds: 30
            periodSeconds: 10
            timeoutSeconds: 5
            successThreshold: 1
            failureThreshold: 30
          resources: {}
          volumeMounts:
            - name: data
              mountPath: /var/lib/postgresql
            - name: config
              mountPath: /etc/postgresql
            - name: run
              mountPath: /var/run/postgresql
            - name: tmp
              mountPath: /tmp
            - name: custom-init-scripts
              mountPath: /docker-entrypoint-initdb.d/
      volumes:
        - name: config
          configMap:
            name: kyoo-postgres
            optional: true
        - name: run
          emptyDir: {}
        - name: tmp
          emptyDir: {}
        - name: custom-init-scripts
          configMap:
            name: kyoo-postgres-init-scripts
            defaultMode: 0755
  volumeClaimTemplates:
    - metadata:
        name: data
        labels:
          helm.sh/chart: postgres-0.12.4
          app.kubernetes.io/name: postgres
          app.kubernetes.io/instance: kyoo
          app.kubernetes.io/version: "18.1.0"
          app.kubernetes.io/managed-by: Helm
      spec:
        accessModes:
          - "ReadWriteOnce"
        resources:
          requests:
            storage: "5Gi"