iac/clusters/brusnika-prod/infrastructure/patches/pgbouncer.yaml

140 lines
3.8 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: pgbouncer
namespace: pgbouncer
spec:
interval: 10m
chart:
spec:
version: "1.0.12"
values:
image:
repository: cr.yandex/crp3ccidau046kdj8g9q/pgbouncer
tag: "1.24.1"
pullPolicy: IfNotPresent
imagePullSecrets:
- name: regcred
service:
enabled: true
type: LoadBalancer
annotations:
kubernetes.io/elb.id: 8cdf5c95-0740-431a-9ef8-d5d76689d0cf
kubernetes.io/elb.class: union
serviceAccount:
create: true
name: pgbouncer-vault
vault:
enabled: true
role: pgbouncer
authPath: kubernetes
secretPath: secrets/data/apps/pgbouncer/backup-ro
extraUsers:
- usernameKey: attachments_username
passwordKey: attachments_password
users: {}
poolMode: session
# checklist(singular)/checklists/message-hub left out:
# - checklist: no stable in-namespace Service for its postgres pod (bare pod only)
# - checklists: active prod incident, app itself gets password auth failures right now,
# unrelated to this change - see role_setup_results.txt
# - message-hub: backend is CrashLoopBackOff, not a real standalone database
databases:
attachments:
host: "89.232.165.105"
port: 5432
user: attachments
dbname: attachments_db
comparisons:
host: postgres-service.comparisons.svc.cluster.local
port: 5432
user: backup_ro
dbname: comparisons
bim:
host: postgres-service.bim.svc.cluster.local
port: 5432
user: backup_ro
dbname: bimapidb
django:
host: postgres-service.django.svc.cluster.local
port: 5432
user: backup_ro
dbname: sarex_db
documentations:
host: postgres-service.documentations.svc.cluster.local
port: 5432
user: backup_ro
dbname: documentations
drawings:
host: postgres-service.drawings.svc.cluster.local
port: 5432
user: backup_ro
dbname: drawings
eav:
host: postgres-service.eav.svc.cluster.local
port: 5432
user: backup_ro
dbname: eav_db
flows:
host: postgres-service.flows.svc.cluster.local
port: 5432
user: backup_ro
dbname: flows_db
inspections:
host: postgres-service.inspections.svc.cluster.local
port: 5432
user: backup_ro
dbname: inspections_db
issues:
host: postgres-service.issues.svc.cluster.local
port: 5432
user: backup_ro
dbname: issues
notes:
host: postgres-service.notes.svc.cluster.local
port: 5432
user: backup_ro
dbname: notes_db
pm:
host: postgres-service.pm.svc.cluster.local
port: 5432
user: backup_ro
dbname: pm_db
resources:
host: postgres-service.resources.svc.cluster.local
port: 5432
user: backup_ro
dbname: resources
subscriptions:
host: postgres-service.subscriptions.svc.cluster.local
port: 5432
user: backup_ro
dbname: subscriptions
system-log:
host: postgres-service.system-log.svc.cluster.local
port: 5432
user: backup_ro
dbname: system_log
transmittal:
host: postgres-service.transmittal.svc.cluster.local
port: 5432
user: backup_ro
dbname: transmittal_db
workflow:
host: postgres-service.workflow.svc.cluster.local
port: 5432
user: backup_ro
dbname: workflows_db
workspaces:
host: postgres-service.workspaces.svc.cluster.local
port: 5432
user: backup_ro
dbname: workspaces_db