wip: Use cert-manager for cnpg's auth

This commit is contained in:
2025-07-16 09:22:15 +02:00
parent 2387f2dab7
commit 4f19e13f3e
6 changed files with 78 additions and 40 deletions
+8 -40
View File
@@ -1,52 +1,20 @@
kind: Namespace
apiVersion: v1
metadata:
name: cnpg
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: cnpg
name: postgres
namespace: argocd
spec:
project: default
destination:
server: https://kubernetes.default.svc
namespace: cnpg
namespace: postgres
syncPolicy:
automated:
prune: true
selfHeal: true
# needed because the CRDs are too long for kubectl apply
syncOptions:
- ServerSideApply=true
selfHeal: false
syncOption:
- CreateNamespace=true
source:
repoURL: https://cloudnative-pg.github.io/charts
chart: cloudnative-pg
targetRevision: v0.24.0
helm:
valuesObject: {}
---
kind: Namespace
apiVersion: v1
metadata:
name: postgres
---
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: postgres-cluster
namespace: postgres
spec:
instances: 3
storage:
size: 10Gi
# this is here because no `Role` crd exsists yet.
# see https://github.com/cloudnative-pg/cloudnative-pg/issues/5341
managed:
roles:
- name: authentik
login: true
disablePassword: true
repoURL: https://github.com/zoriya/snow
targetRevision: HEAD
path: apps/postgres