Merge pull request 'chore(deps): update helm release plugin-barman-cloud to v0.6.0' (#11) from renovate/plugin-barman-cloud-0.x into main

Reviewed-on: #11

postgres/chart/Chart.yaml

@@ -24,5 +24,8 @@ appVersion: "1.0"
 
 dependencies:
 - name: cloudnative-pg
-  version: 0.27.0
+  version: 0.28.0
+  repository: https://cloudnative-pg.github.io/charts
+- name: plugin-barman-cloud
+  version: 0.6.0
   repository: https://cloudnative-pg.github.io/charts

postgres/config/attic_auth.yaml

@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: attic-auth
+spec:
+  data:
+  - remoteRef:
+      conversionStrategy: Default
+      decodingStrategy: None
+      key: cloudnativepg
+      metadataPolicy: None
+      property: attic_pw
+    secretKey: password
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: weyma-vault
+  target:
+    template:
+      data:
+        username: attic
+        password: "{{ .password }}"
+    creationPolicy: Owner
+    deletionPolicy: Retain
+    name: attic-auth

postgres/config/backup/objectstore.yaml

@@ -0,0 +1,15 @@
+apiVersion: barmancloud.cnpg.io/v1
+kind: ObjectStore
+metadata:
+  name: truenas-s3
+spec:
+  configuration:
+    destinationPath: "s3://weyma-talos-shared-pgsql-new/"
+    endpointURL: http://10.105.15.20:9000
+    s3Credentials:
+      accessKeyId:
+        key: s3AccessKey
+        name: s3-backup-creds
+      secretAccessKey:
+        key: s3SecretKey
+        name: s3-backup-creds

postgres/config/backup/scheduled_backup.yaml

@@ -6,4 +6,7 @@ spec:
   schedule: "0 0 4 * * *"
   backupOwnerReference: self
   cluster:
-    name: weyma-pgsql
+    name: weyma-pgsql
+  method: plugin
+  pluginConfiguration:
+    name: barman-cloud.cloudnative-pg.io

postgres/config/clusters/main.yaml

@@ -11,23 +11,56 @@ spec:
     size: 50Gi
     storageClass: rook-ceph-block
 
-  backup:
-    barmanObjectStore:
-      destinationPath: "s3://weyma-talos-shared-pgsql-new/"
-      endpointURL: http://10.105.15.20:9000
-      s3Credentials:
-        accessKeyId:
-          key: s3AccessKey
-          name: s3-backup-creds
-        secretAccessKey:
-          key: s3SecretKey
-          name: s3-backup-creds
+  plugins:
+    - name: barman-cloud.cloudnative-pg.io
+      parameters:
+        barmanObjectName: truenas-s3
 
   inheritedMetadata:
     labels:
       metrics_enabled: "true"
+  
+  externalClusters:
+    - name: weyma-pgsql
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: truenas-s3
+          serverName: weyma-pgsql
+    - name: weyma-bs-pgsql
+      connectionParameters:
+        host: 10.105.6.198
+        user: streaming_replica
+        dbname: postgres
+        sslmode: require
+      plugin:
+        name: barman-cloud.cloudnative-pg.io
+        parameters:
+          barmanObjectName: truenas-s3
+          serverName: weyma-bs-pgsql
+      sslKey:
+        name: weyma-pgsql-replication
+        key: tls.key
+      sslCert:
+        name: weyma-pgsql-replication
+        key: tls.crt
+      sslRootCert:
+        name: weyma-pgsql-ca
+        key: ca.crt
+
+  replica:
+    primary: weyma-pgsql
+    source: weyma-bs-pgsql
 
   managed:
+    services:
+      additional:
+        - selectorType: rw
+          serviceTemplate:
+            metadata:
+              name: weyma-pgsql-ext
+            spec:
+              type: LoadBalancer
     roles:
     - name: williamp
       ensure: present
@@ -60,6 +93,12 @@ spec:
       login: true
       passwordSecret:
         name: netmaker-auth
+    - name: attic
+      ensure: present
+      comment: attic
+      login: true
+      passwordSecret:
+        name: attic-auth
     - name: pooler
       ensure: present
       comment: pooler

postgres/config/databases/attic.yaml

@@ -0,0 +1,9 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: attic
+spec:
+  name: attic
+  owner: attic
+  cluster:
+    name: weyma-pgsql

postgres/config/poolers/pooler-weyma-authentik.yaml

@@ -0,0 +1,14 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Pooler
+metadata:
+  name: pooler-weyma-rw-authentik
+spec:
+  cluster:
+    name: weyma-pgsql
+  instances: 3
+  type: rw
+  pgbouncer:
+    poolMode: transaction
+    parameters:
+      max_client_conn: "10000"
+      default_pool_size: "100"