whyredfire
f23dd4fcd4
Move legislative-summarization off its dedicated CNPG cluster onto the shared one, with its own role and database like authentik and grafana.
40 lines
863 B
YAML
40 lines
863 B
YAML
apiVersion: postgresql.cnpg.io/v1
|
|
kind: Cluster
|
|
metadata:
|
|
name: postgres
|
|
namespace: postgres
|
|
spec:
|
|
enablePDB: false
|
|
imageName: ghcr.io/cloudnative-pg/postgresql:18
|
|
instances: 1
|
|
managed:
|
|
roles:
|
|
- ensure: present
|
|
login: true
|
|
name: authentik
|
|
passwordSecret:
|
|
name: authentik-db
|
|
- ensure: present
|
|
login: true
|
|
name: grafana
|
|
passwordSecret:
|
|
name: grafana-db
|
|
- ensure: present
|
|
login: true
|
|
name: legislative
|
|
passwordSecret:
|
|
name: legislative-db
|
|
postgresql:
|
|
# Each app role may only connect to the database of the same name.
|
|
pg_hba:
|
|
- host sameuser all all scram-sha-256
|
|
- host all all all reject
|
|
resources:
|
|
limits:
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
storage:
|
|
size: 5Gi
|