diff --git a/README.md b/README.md index 76847b8..e0d24e6 100644 --- a/README.md +++ b/README.md @@ -19,13 +19,19 @@ References: - - - -For fluxcd setup execute. +Setup fluxcd and non reconcilable resources. ```bash ops-scripts/apply-flux.sh ``` +**Add chart, if inspect required.** + +``` bash +helm repo add gitea-charts https://dl.gitea.com/charts/ +helm repo update +``` + **Encrypt secrets:** ``` bash diff --git a/deploy/app/helm-values.yaml b/deploy/app/helm-values.yaml index 4b8013c..16756b9 100644 --- a/deploy/app/helm-values.yaml +++ b/deploy/app/helm-values.yaml @@ -90,29 +90,6 @@ postgresql-ha: # dependency: # https://github.com/bitnami/charts/blob/main/bitnami/postgresql postgresql: - enabled: true - image: - repository: bitnamilegacy/postgresql - tag: 16 - imagePullPolicy: Always - global: - postgresql: - auth: - postgresPassword: "" # !!! set on values.private.yaml - password: "" # !!! set on values.private.yaml - database: "" # !!! set on values.private.yaml - username: "" # !!! set on values.private.yaml - - serviceAccount: - # serviceAccount resources are owned and managed by the Infrastructure layer. - # The CI/CD ServiceAccount used for application deployments does not have - # permissions to create or modify serviceAccounts, by design. - # In this setup postgresql does not require its own ServiceAccount, so enabling - # this would provide no benefit and would cause Helm upgrades to fail due - # to RBAC restrictions. - create: false - - primary: networkPolicy: # Disable NetworkPolicy creation in the Bitnami PostgreSQL subchart. @@ -126,6 +103,37 @@ postgresql: # Infra-owned NetworkPolicies are applied separately and independently # of application charts to maintain a clean separation of responsibilities. enabled: false + resources: + limits: + cpu: 500m + ephemeral-storage: 2Gi + memory: 512Mi + requests: + cpu: 250m + ephemeral-storage: 50Mi + memory: 256Mi + enabled: true + image: + repository: bitnamilegacy/postgresql + tag: 16 + imagePullPolicy: Always + global: + postgresql: + auth: + postgresPassword: "" # !!! set on values.private.yaml + password: "" # !!! set on values.private.yaml + database: "" # !!! set on values.private.yaml + username: "" # !!! set on values.private.yaml + serviceAccount: + # serviceAccount resources are owned and managed by the Infrastructure layer. + # The CI/CD ServiceAccount used for application deployments does not have + # permissions to create or modify serviceAccounts, by design. + # In this setup postgresql does not require its own ServiceAccount, so enabling + # this would provide no benefit and would cause Helm upgrades to fail due + # to RBAC restrictions. + create: false + + pdb: # Disable the PodDisruptionBudget for PostgreSQL. #