automatic db-pw update

2026-06-14 01:53:12 +02:00
parent 9e7de2cd13
commit e544312715
4 changed files with 72 additions and 2 deletions
@@ -24,3 +24,12 @@ spec:
    initdb:
      database: mas
      owner: mas
+      secret:
+        name: synapse-secret
+  managed:
+    roles:
+      - name: mas
+        login: true
+        passwordSecret:
+          name: synapse-secret
+          key: MAS_DB_PASSWORD
@@ -0,0 +1,26 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: mas-db
+  namespace: synapse
+spec:
+  instances: 3
+  storage:
+    size: 2Gi
+    storageClass: longhorn
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://cnpg-backups/mas
+      endpointURL: http://192.168.2.107:9010
+      s3Credentials:
+        accessKeyId:
+          name: minio-cnpg-credentials
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio-cnpg-credentials
+          key: ACCESS_SECRET_KEY
+    retentionPolicy: "30d"
+  bootstrap:
+    initdb:
+      database: mas
+      owner: mas
@@ -24,3 +24,12 @@ spec:
    initdb:
      database: synapse
      owner: synapse
+      secret:
+        name: synapse-secret
+  managed:
+    roles:
+      - name: synapse
+        login: true
+        passwordSecret:
+          name: synapse-secret
+          key: SYNAPSE_DB_PASSWORD
@@ -0,0 +1,26 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: synapse-db
+  namespace: synapse
+spec:
+  instances: 3
+  storage:
+    size: 5Gi
+    storageClass: longhorn
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://cnpg-backups/synapse
+      endpointURL: http://192.168.2.107:9010
+      s3Credentials:
+        accessKeyId:
+          name: minio-cnpg-credentials
+          key: ACCESS_KEY_ID
+        secretAccessKey:
+          name: minio-cnpg-credentials
+          key: ACCESS_SECRET_KEY
+    retentionPolicy: "30d"
+  bootstrap:
+    initdb:
+      database: synapse
+      owner: synapse