diff --git a/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml b/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml index c717afb3..c508db1a 100644 --- a/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml +++ b/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml @@ -33,3 +33,23 @@ spec: remoteRef: remoteKey: grafana property: GF_DATABASE_PASSWORD +--- +# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/pushsecret_v1alpha1.json +apiVersion: external-secrets.io/v1alpha1 +kind: PushSecret +metadata: + name: gatus +spec: + refreshInterval: 1h + secretStoreRefs: + - name: onepassword-connect + kind: ClusterSecretStore + selector: + secret: + name: postgres-pguser-gatus + data: + - match: + secretKey: uri + remoteRef: + remoteKey: gatus + property: DATABASE_URI \ No newline at end of file diff --git a/kubernetes/apps/observability/gatus/app/kustomization.yaml b/kubernetes/apps/observability/gatus/app/kustomization.yaml index d5984411..b3e735f5 100644 --- a/kubernetes/apps/observability/gatus/app/kustomization.yaml +++ b/kubernetes/apps/observability/gatus/app/kustomization.yaml @@ -5,8 +5,6 @@ kind: Kustomization resources: - ./externalsecret.yaml - ./helmrelease.yaml - - ./postgresCluster.yaml - - ./pushsecret.yaml configMapGenerator: - name: gatus-configmap files: diff --git a/kubernetes/apps/observability/gatus/app/postgresCluster.yaml b/kubernetes/apps/observability/gatus/app/postgresCluster.yaml deleted file mode 100644 index 14b451d5..00000000 --- a/kubernetes/apps/observability/gatus/app/postgresCluster.yaml +++ /dev/null @@ -1,86 +0,0 @@ ---- -# yaml-language-server: $schema=https://ks.hsn.dev/postgres-operator.crunchydata.com/postgrescluster_v1beta1.json -apiVersion: postgres-operator.crunchydata.com/v1beta1 -kind: PostgresCluster -metadata: - name: "${APP}" -spec: - postgresVersion: 16 - dataSource: - pgbackrest: - stanza: db - configuration: - - secret: - name: pgo-s3-creds - global: - repo1-path: "/${APP}/repo1" - repo1-s3-uri-style: path - repo: - name: repo1 - s3: - bucket: "crunchy-postgres" - endpoint: "s3.hsn.dev" - region: "us-east-1" - patroni: - dynamicConfiguration: - synchronous_mode: true - postgresql: - synchronous_commit: "on" - pg_hba: - - hostnossl all all 10.32.0.0/16 md5 - - hostssl all all all md5 - instances: - - name: postgres - metadata: - labels: - app.kubernetes.io/name: pgo-${APP} - replicas: 2 - dataVolumeClaimSpec: - storageClassName: openebs-hostpath - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 5Gi - topologySpreadConstraints: - - maxSkew: 1 - topologyKey: "kubernetes.io/hostname" - whenUnsatisfiable: "DoNotSchedule" - labelSelector: - matchLabels: - postgres-operator.crunchydata.com/cluster: ${APP} - postgres-operator.crunchydata.com/data: postgres - users: - - name: "gatus" - databases: - - "${DB_NAME}" - options: "SUPERUSER" - password: - type: AlphaNumeric - backups: - pgbackrest: - configuration: - - secret: - name: pgo-s3-creds - global: - archive-push-queue-max: 4GiB - repo1-retention-full: "14" - repo1-retention-full-type: time - repo1-path: "/${APP}/repo1" - repo1-s3-uri-style: path - manual: - repoName: repo1 - options: - - --type=full - metadata: - labels: - app.kubernetes.io/name: pgo-${APP}-backup - repos: - - name: repo1 - schedules: - full: "0 1 * * 0" - differential: "0 1 * * 1-6" - s3: - bucket: "crunchy-postgres" - endpoint: "s3.hsn.dev" - region: "us-east-1" diff --git a/kubernetes/apps/observability/gatus/app/pushsecret.yaml b/kubernetes/apps/observability/gatus/app/pushsecret.yaml deleted file mode 100644 index 3dc72b88..00000000 --- a/kubernetes/apps/observability/gatus/app/pushsecret.yaml +++ /dev/null @@ -1,20 +0,0 @@ ---- -# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/pushsecret_v1alpha1.json -apiVersion: external-secrets.io/v1alpha1 -kind: PushSecret -metadata: - name: gatus -spec: - refreshInterval: 1h - secretStoreRefs: - - name: onepassword-connect - kind: ClusterSecretStore - selector: - secret: - name: gatus-pguser-gatus - data: - - match: - secretKey: uri - remoteRef: - remoteKey: gatus - property: DATABASE_URI \ No newline at end of file