apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: postgresql
  namespace: postgresql
spec:
  interval: 5m
  timeout: 2h

  install:
    timeout: 2h
    remediation:
      retries: 3

  upgrade:
    timeout: 2h
    remediation:
      retries: 3

  values:
    global:
      security:
        allowInsecureImages: true
      defaultStorageClass: local-path
      postgresql:
        auth:
          username: ""
          database: ""
    auth:
      username: ""
      database: ""
    image:
      registry: cr.yandex/crp3ccidau046kdj8g9q
      repository: contour/postgresql
      tag: 17.0.2
      pullPolicy: Always
    metrics:
      enabled: false
      prometheusRule:
        enabled: false
    primary:
      containerSecurityContext:
        readOnlyRootFilesystem: false
      persistence:
        storageClass: local-path
        size: 20Gi
      extraEnvVars:
        - name: CONTOUR_PGUSER
          value: "sarex"
        - name: CONTOUR_PGPASSWORD
          valueFrom:
            secretKeyRef:
              name: postgresql
              key: user-password
      nodeSelector:
        dedicated: db
      tolerations:
        - key: dedicated
          operator: Equal
          value: db
          effect: NoSchedule
    contour:
      enabled: true
      adminUser: "sarex"
      adminPasswordSecretKey: "user-password"
      sharedPreloadLibraries: "timescaledb,pg_stat_statements"
      databases:
        - name: sarex_db
          user: sarex
          extensions:
            - ltree
            - pg_stat_statements
            - uuid-ossp
          restoreFromDump: true
          dumpKey: sarex_db.sql
        - name: zitadel
          user: zitadel
          extensions: []
          restoreFromDump: false
      s3-proxy:
        endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"