From dc4aa237fb673d743535eb054fc2d941274a9f4a Mon Sep 17 00:00:00 2001 From: Arlan Lloyd Date: Wed, 14 Aug 2024 06:11:41 +0000 Subject: [PATCH] try slightly different format --- bitnami.yaml | 44 ++++++++++++++++++++++++++++++++++++++++++++ chart/values.yaml | 6 ++++-- 2 files changed, 48 insertions(+), 2 deletions(-) create mode 100644 bitnami.yaml diff --git a/bitnami.yaml b/bitnami.yaml new file mode 100644 index 00000000..e596f7cc --- /dev/null +++ b/bitnami.yaml @@ -0,0 +1,44 @@ +# postgresql: +# enabled: false +# auth: +# # this does not read from a secret. not sure how to map +# # just manually make the same +# username: "kyoo_back" +# database: "{{ .Values.global.postgres.database }}" +# existingSecret: "{{ .Values.global.postgres.infra.existingSecret }}" +# secretKeys: +# adminPasswordKey: "{{ .Values.global.postgres.infra.passwordKey }}" +# userPasswordKey: "{{ .Values.global.postgres.infra.passwordKey }}" +# primary: +# persistence: +# size: 3Gi + + +### TEST + # scripts: + # initdb.sql: | + # CREATE USER kyoo_back WITH PASSWORD 'password1'; + # CREATE DATABASE kyoo_back; + # GRANT ALL PRIVILEGES ON DATABASE kyoo_back TO kyoo_back; + + +# helm template bitnami/postgresql -f bitnami.yaml + +auth: + username: "kyoo_all" + password: "password1" +primary: + initdb: + scripts: + kyoo_back.sql: | + CREATE DATABASE kyoo_back WITH OWNER kyoo_all; + \connect kyoo_back; + CREATE SCHEMA IF NOT EXISTS data AUTHORIZATION kyoo_all; + kyoo_transcoder.sql: | + CREATE DATABASE kyoo_transcoder WITH OWNER kyoo_all; + \connect kyoo_transcoder; + REVOKE ALL ON SCHEMA public FROM PUBLIC; + CREATE SCHEMA IF NOT EXISTS data AUTHORIZATION kyoo_all; + user.sql: | + ALTER ROLE kyoo_all IN DATABASE kyoo_back SET search_path TO "$user", public; + ALTER ROLE kyoo_all IN DATABASE kyoo_transcoder SET search_path TO "$user", data; \ No newline at end of file diff --git a/chart/values.yaml b/chart/values.yaml index d0be57d3..c90af0d3 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -350,8 +350,10 @@ postgresql: REVOKE ALL ON SCHEMA public FROM PUBLIC; CREATE SCHEMA IF NOT EXISTS data AUTHORIZATION {{ .Values.global.postgres.infra.user }}; user.sql: | - ALTER ROLE {{ .Values.global.postgres.infra.user }} IN DATABASE {{ .Values.global.postgres.kyoo_back.database }} SET search_path TO "$user", public; - ALTER ROLE {{ .Values.global.postgres.infra.user }} IN DATABASE {{ .Values.global.postgres.kyoo_transcoder.database }} SET search_path TO "$user", data; + ALTER ROLE {{ .Values.global.postgres.infra.user }} + IN DATABASE {{ .Values.global.postgres.kyoo_back.database }} SET search_path TO "$user", public; + ALTER ROLE {{ .Values.global.postgres.infra.user }} + IN DATABASE {{ .Values.global.postgres.kyoo_transcoder.database }} SET search_path TO "$user", data; persistence: size: 3Gi