k8s-gitops
k8s-gitops copied to clipboard
feat!: update helm chart vikunja to 6.1.0
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| vikunja | major | 5.5.3 -> 6.1.2 |
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, click this checkbox. ⚠ Warning: custom changes will be lost.
This PR has been generated by Renovate Bot.
Path: k8s/clusters/cluster-0/manifests/collab/vikunja/helm-release.yaml
Version: 5.5.3 -> 6.0.0
@@ -4,15 +4,15 @@
kind: Secret
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- namespace: default
type: Opaque
data:
- postgresql-postgres-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19BRE1JTl9QQVNTV09SRH0="
- postgresql-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19QQVNTV09SRH0="
+ postgres-password: "T1NQWTJlZFVWNQ=="
+ # We don't auto-generate LDAP password when it's not provided as we do for other passwords
---
# Source: vikunja/templates/configmap.yaml
apiVersion: v1
@@ -59,21 +59,22 @@
service:
jwtsecret: "myVeryComplexJWTSecret"
---
-# Source: vikunja/charts/postgresql/templates/svc-headless.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc-headless.yaml
apiVersion: v1
kind: Service
metadata:
- name: vikunja-postgresql-headless
+ name: vikunja-postgresql-hl
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
# Use this annotation in addition to the actual publishNotReadyAddresses
# field below because the annotation will stop being respected soon but the
# field is broken in some versions of Kubernetes:
# https://github.com/kubernetes/kubernetes/issues/58662
service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
- namespace: default
spec:
type: ClusterIP
clusterIP: None
@@ -88,28 +89,32 @@
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
+ app.kubernetes.io/component: primary
---
-# Source: vikunja/charts/postgresql/templates/svc.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc.yaml
apiVersion: v1
kind: Service
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
type: ClusterIP
+ sessionAffinity: None
ports:
- name: tcp-postgresql
port: 5432
targetPort: tcp-postgresql
+ nodePort: null
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
---
# Source: vikunja/templates/common.yaml
apiVersion: v1
@@ -248,28 +253,29 @@
configMap:
name: vikunja-config
---
-# Source: vikunja/charts/postgresql/templates/statefulset.yaml
+# Source: vikunja/charts/postgresql/templates/primary/statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
- serviceName: vikunja-postgresql-headless
replicas: 1
+ serviceName: vikunja-postgresql-hl
updateStrategy:
+ rollingUpdate: {}
type: RollingUpdate
selector:
matchLabels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
template:
metadata:
name: vikunja-postgresql
@@ -277,9 +283,10 @@
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- role: primary
app.kubernetes.io/component: primary
+ annotations:
spec:
+ serviceAccountName: default
affinity:
podAffinity:
podAntiAffinity:
@@ -297,15 +304,13 @@
nodeAffinity:
securityContext:
fsGroup: 1001
- automountServiceAccountToken: false
+ hostNetwork: false
+ hostIPC: false
+ initContainers:
containers:
- - name: vikunja-postgresql
- image: docker.io/bitnami/postgresql:11.14.0-debian-10-r28
+ - name: postgresql
+ image: docker.io/bitnami/postgresql:14.4.0-debian-11-r4
imagePullPolicy: "IfNotPresent"
- resources:
- requests:
- cpu: 250m
- memory: 256Mi
securityContext:
runAsUser: 1001
env:
@@ -317,24 +322,22 @@
value: "/bitnami/postgresql"
- name: PGDATA
value: "/bitnami/postgresql/data"
- - name: POSTGRES_POSTGRES_PASSWORD
- valueFrom:
- secretKeyRef:
- name: vikunja-postgresql
- key: postgresql-postgres-password
- - name: POSTGRES_USER
- value: "vikunja"
+ # Authentication
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: vikunja-postgresql
- key: postgresql-password
- - name: POSTGRES_DB
- value: "vikunja"
+ key: postgres-password
+ # Replication
+ # Initdb
+ # Standby
+ # LDAP
- name: POSTGRESQL_ENABLE_LDAP
value: "no"
+ # TLS
- name: POSTGRESQL_ENABLE_TLS
value: "no"
+ # Audit
- name: POSTGRESQL_LOG_HOSTNAME
value: "false"
- name: POSTGRESQL_LOG_CONNECTIONS
@@ -343,6 +346,7 @@
value: "false"
- name: POSTGRESQL_PGAUDIT_LOG_CATALOG
value: "off"
+ # Others
- name: POSTGRESQL_CLIENT_MIN_MESSAGES
value: "error"
- name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
@@ -351,43 +355,53 @@
- name: tcp-postgresql
containerPort: 5432
livenessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- - exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
- initialDelaySeconds: 30
+ - exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
+ readinessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 5
periodSeconds: 10
- timeoutSeconds: 5
successThreshold: 1
- failureThreshold: 6
- readinessProbe:
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- -e
- |
- exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
+ exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
[ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
- initialDelaySeconds: 5
- periodSeconds: 10
- timeoutSeconds: 5
- successThreshold: 1
- failureThreshold: 6
+ resources:
+ limits: {}
+ requests:
+ cpu: 250m
+ memory: 256Mi
volumeMounts:
- name: dshm
mountPath: /dev/shm
- name: data
mountPath: /bitnami/postgresql
- subPath:
volumes:
- name: dshm
emptyDir:
medium: Memory
- - name: data
- persistentVolumeClaim:
- claimName: vikunja-postgresql-pvc
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
---
# Source: vikunja/templates/common.yaml
apiVersion: networking.k8s.io/v1
Path: k8s/clusters/cluster-0/manifests/collab/vikunja/helm-release.yaml
Version: 5.5.3 -> 6.1.0
@@ -4,15 +4,15 @@
kind: Secret
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- namespace: default
type: Opaque
data:
- postgresql-postgres-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19BRE1JTl9QQVNTV09SRH0="
- postgresql-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19QQVNTV09SRH0="
+ postgres-password: "bWtBTHVPU1JIbw=="
+ # We don't auto-generate LDAP password when it's not provided as we do for other passwords
---
# Source: vikunja/templates/configmap.yaml
apiVersion: v1
@@ -59,21 +59,22 @@
service:
jwtsecret: "myVeryComplexJWTSecret"
---
-# Source: vikunja/charts/postgresql/templates/svc-headless.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc-headless.yaml
apiVersion: v1
kind: Service
metadata:
- name: vikunja-postgresql-headless
+ name: vikunja-postgresql-hl
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
# Use this annotation in addition to the actual publishNotReadyAddresses
# field below because the annotation will stop being respected soon but the
# field is broken in some versions of Kubernetes:
# https://github.com/kubernetes/kubernetes/issues/58662
service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
- namespace: default
spec:
type: ClusterIP
clusterIP: None
@@ -88,28 +89,32 @@
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
+ app.kubernetes.io/component: primary
---
-# Source: vikunja/charts/postgresql/templates/svc.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc.yaml
apiVersion: v1
kind: Service
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
type: ClusterIP
+ sessionAffinity: None
ports:
- name: tcp-postgresql
port: 5432
targetPort: tcp-postgresql
+ nodePort: null
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
---
# Source: vikunja/templates/common.yaml
apiVersion: v1
@@ -248,28 +253,29 @@
configMap:
name: vikunja-config
---
-# Source: vikunja/charts/postgresql/templates/statefulset.yaml
+# Source: vikunja/charts/postgresql/templates/primary/statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
- serviceName: vikunja-postgresql-headless
replicas: 1
+ serviceName: vikunja-postgresql-hl
updateStrategy:
+ rollingUpdate: {}
type: RollingUpdate
selector:
matchLabels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
template:
metadata:
name: vikunja-postgresql
@@ -277,9 +283,10 @@
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- role: primary
app.kubernetes.io/component: primary
+ annotations:
spec:
+ serviceAccountName: default
affinity:
podAffinity:
podAntiAffinity:
@@ -297,15 +304,13 @@
nodeAffinity:
securityContext:
fsGroup: 1001
- automountServiceAccountToken: false
+ hostNetwork: false
+ hostIPC: false
+ initContainers:
containers:
- - name: vikunja-postgresql
- image: docker.io/bitnami/postgresql:11.14.0-debian-10-r28
+ - name: postgresql
+ image: docker.io/bitnami/postgresql:14.4.0-debian-11-r4
imagePullPolicy: "IfNotPresent"
- resources:
- requests:
- cpu: 250m
- memory: 256Mi
securityContext:
runAsUser: 1001
env:
@@ -317,24 +322,22 @@
value: "/bitnami/postgresql"
- name: PGDATA
value: "/bitnami/postgresql/data"
- - name: POSTGRES_POSTGRES_PASSWORD
- valueFrom:
- secretKeyRef:
- name: vikunja-postgresql
- key: postgresql-postgres-password
- - name: POSTGRES_USER
- value: "vikunja"
+ # Authentication
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: vikunja-postgresql
- key: postgresql-password
- - name: POSTGRES_DB
- value: "vikunja"
+ key: postgres-password
+ # Replication
+ # Initdb
+ # Standby
+ # LDAP
- name: POSTGRESQL_ENABLE_LDAP
value: "no"
+ # TLS
- name: POSTGRESQL_ENABLE_TLS
value: "no"
+ # Audit
- name: POSTGRESQL_LOG_HOSTNAME
value: "false"
- name: POSTGRESQL_LOG_CONNECTIONS
@@ -343,6 +346,7 @@
value: "false"
- name: POSTGRESQL_PGAUDIT_LOG_CATALOG
value: "off"
+ # Others
- name: POSTGRESQL_CLIENT_MIN_MESSAGES
value: "error"
- name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
@@ -351,43 +355,53 @@
- name: tcp-postgresql
containerPort: 5432
livenessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- - exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
- initialDelaySeconds: 30
+ - exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
+ readinessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 5
periodSeconds: 10
- timeoutSeconds: 5
successThreshold: 1
- failureThreshold: 6
- readinessProbe:
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- -e
- |
- exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
+ exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
[ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
- initialDelaySeconds: 5
- periodSeconds: 10
- timeoutSeconds: 5
- successThreshold: 1
- failureThreshold: 6
+ resources:
+ limits: {}
+ requests:
+ cpu: 250m
+ memory: 256Mi
volumeMounts:
- name: dshm
mountPath: /dev/shm
- name: data
mountPath: /bitnami/postgresql
- subPath:
volumes:
- name: dshm
emptyDir:
medium: Memory
- - name: data
- persistentVolumeClaim:
- claimName: vikunja-postgresql-pvc
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
---
# Source: vikunja/templates/common.yaml
apiVersion: networking.k8s.io/v1
Path: k8s/clusters/cluster-0/manifests/collab/vikunja/helm-release.yaml
Version: 5.5.3 -> 6.1.0
@@ -4,15 +4,15 @@
kind: Secret
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- namespace: default
type: Opaque
data:
- postgresql-postgres-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19BRE1JTl9QQVNTV09SRH0="
- postgresql-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19QQVNTV09SRH0="
+ postgres-password: "MUdOdWFSclA2SQ=="
+ # We don't auto-generate LDAP password when it's not provided as we do for other passwords
---
# Source: vikunja/templates/configmap.yaml
apiVersion: v1
@@ -59,21 +59,22 @@
service:
jwtsecret: "myVeryComplexJWTSecret"
---
-# Source: vikunja/charts/postgresql/templates/svc-headless.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc-headless.yaml
apiVersion: v1
kind: Service
metadata:
- name: vikunja-postgresql-headless
+ name: vikunja-postgresql-hl
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
# Use this annotation in addition to the actual publishNotReadyAddresses
# field below because the annotation will stop being respected soon but the
# field is broken in some versions of Kubernetes:
# https://github.com/kubernetes/kubernetes/issues/58662
service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
- namespace: default
spec:
type: ClusterIP
clusterIP: None
@@ -88,28 +89,32 @@
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
+ app.kubernetes.io/component: primary
---
-# Source: vikunja/charts/postgresql/templates/svc.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc.yaml
apiVersion: v1
kind: Service
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
type: ClusterIP
+ sessionAffinity: None
ports:
- name: tcp-postgresql
port: 5432
targetPort: tcp-postgresql
+ nodePort: null
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
---
# Source: vikunja/templates/common.yaml
apiVersion: v1
@@ -248,28 +253,29 @@
configMap:
name: vikunja-config
---
-# Source: vikunja/charts/postgresql/templates/statefulset.yaml
+# Source: vikunja/charts/postgresql/templates/primary/statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
- serviceName: vikunja-postgresql-headless
replicas: 1
+ serviceName: vikunja-postgresql-hl
updateStrategy:
+ rollingUpdate: {}
type: RollingUpdate
selector:
matchLabels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
template:
metadata:
name: vikunja-postgresql
@@ -277,9 +283,10 @@
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- role: primary
app.kubernetes.io/component: primary
+ annotations:
spec:
+ serviceAccountName: default
affinity:
podAffinity:
podAntiAffinity:
@@ -297,15 +304,13 @@
nodeAffinity:
securityContext:
fsGroup: 1001
- automountServiceAccountToken: false
+ hostNetwork: false
+ hostIPC: false
+ initContainers:
containers:
- - name: vikunja-postgresql
- image: docker.io/bitnami/postgresql:11.14.0-debian-10-r28
+ - name: postgresql
+ image: docker.io/bitnami/postgresql:14.4.0-debian-11-r4
imagePullPolicy: "IfNotPresent"
- resources:
- requests:
- cpu: 250m
- memory: 256Mi
securityContext:
runAsUser: 1001
env:
@@ -317,24 +322,22 @@
value: "/bitnami/postgresql"
- name: PGDATA
value: "/bitnami/postgresql/data"
- - name: POSTGRES_POSTGRES_PASSWORD
- valueFrom:
- secretKeyRef:
- name: vikunja-postgresql
- key: postgresql-postgres-password
- - name: POSTGRES_USER
- value: "vikunja"
+ # Authentication
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: vikunja-postgresql
- key: postgresql-password
- - name: POSTGRES_DB
- value: "vikunja"
+ key: postgres-password
+ # Replication
+ # Initdb
+ # Standby
+ # LDAP
- name: POSTGRESQL_ENABLE_LDAP
value: "no"
+ # TLS
- name: POSTGRESQL_ENABLE_TLS
value: "no"
+ # Audit
- name: POSTGRESQL_LOG_HOSTNAME
value: "false"
- name: POSTGRESQL_LOG_CONNECTIONS
@@ -343,6 +346,7 @@
value: "false"
- name: POSTGRESQL_PGAUDIT_LOG_CATALOG
value: "off"
+ # Others
- name: POSTGRESQL_CLIENT_MIN_MESSAGES
value: "error"
- name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
@@ -351,43 +355,53 @@
- name: tcp-postgresql
containerPort: 5432
livenessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- - exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
- initialDelaySeconds: 30
+ - exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
+ readinessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 5
periodSeconds: 10
- timeoutSeconds: 5
successThreshold: 1
- failureThreshold: 6
- readinessProbe:
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- -e
- |
- exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
+ exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
[ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
- initialDelaySeconds: 5
- periodSeconds: 10
- timeoutSeconds: 5
- successThreshold: 1
- failureThreshold: 6
+ resources:
+ limits: {}
+ requests:
+ cpu: 250m
+ memory: 256Mi
volumeMounts:
- name: dshm
mountPath: /dev/shm
- name: data
mountPath: /bitnami/postgresql
- subPath:
volumes:
- name: dshm
emptyDir:
medium: Memory
- - name: data
- persistentVolumeClaim:
- claimName: vikunja-postgresql-pvc
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
---
# Source: vikunja/templates/common.yaml
apiVersion: networking.k8s.io/v1
Path: k8s/clusters/cluster-0/manifests/collab/vikunja/helm-release.yaml
Version: 5.5.3 -> 6.1.1
@@ -4,15 +4,15 @@
kind: Secret
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- namespace: default
type: Opaque
data:
- postgresql-postgres-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19BRE1JTl9QQVNTV09SRH0="
- postgresql-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19QQVNTV09SRH0="
+ postgres-password: "b3EwaEJFalBHTQ=="
+ # We don't auto-generate LDAP password when it's not provided as we do for other passwords
---
# Source: vikunja/templates/configmap.yaml
apiVersion: v1
@@ -59,21 +59,22 @@
service:
jwtsecret: "myVeryComplexJWTSecret"
---
-# Source: vikunja/charts/postgresql/templates/svc-headless.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc-headless.yaml
apiVersion: v1
kind: Service
metadata:
- name: vikunja-postgresql-headless
+ name: vikunja-postgresql-hl
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
# Use this annotation in addition to the actual publishNotReadyAddresses
# field below because the annotation will stop being respected soon but the
# field is broken in some versions of Kubernetes:
# https://github.com/kubernetes/kubernetes/issues/58662
service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
- namespace: default
spec:
type: ClusterIP
clusterIP: None
@@ -88,28 +89,32 @@
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
+ app.kubernetes.io/component: primary
---
-# Source: vikunja/charts/postgresql/templates/svc.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc.yaml
apiVersion: v1
kind: Service
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
type: ClusterIP
+ sessionAffinity: None
ports:
- name: tcp-postgresql
port: 5432
targetPort: tcp-postgresql
+ nodePort: null
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
---
# Source: vikunja/templates/common.yaml
apiVersion: v1
@@ -248,28 +253,29 @@
configMap:
name: vikunja-config
---
-# Source: vikunja/charts/postgresql/templates/statefulset.yaml
+# Source: vikunja/charts/postgresql/templates/primary/statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
- serviceName: vikunja-postgresql-headless
replicas: 1
+ serviceName: vikunja-postgresql-hl
updateStrategy:
+ rollingUpdate: {}
type: RollingUpdate
selector:
matchLabels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
template:
metadata:
name: vikunja-postgresql
@@ -277,9 +283,10 @@
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- role: primary
app.kubernetes.io/component: primary
+ annotations:
spec:
+ serviceAccountName: default
affinity:
podAffinity:
podAntiAffinity:
@@ -297,15 +304,13 @@
nodeAffinity:
securityContext:
fsGroup: 1001
- automountServiceAccountToken: false
+ hostNetwork: false
+ hostIPC: false
+ initContainers:
containers:
- - name: vikunja-postgresql
- image: docker.io/bitnami/postgresql:11.14.0-debian-10-r28
+ - name: postgresql
+ image: docker.io/bitnami/postgresql:14.4.0-debian-11-r4
imagePullPolicy: "IfNotPresent"
- resources:
- requests:
- cpu: 250m
- memory: 256Mi
securityContext:
runAsUser: 1001
env:
@@ -317,24 +322,22 @@
value: "/bitnami/postgresql"
- name: PGDATA
value: "/bitnami/postgresql/data"
- - name: POSTGRES_POSTGRES_PASSWORD
- valueFrom:
- secretKeyRef:
- name: vikunja-postgresql
- key: postgresql-postgres-password
- - name: POSTGRES_USER
- value: "vikunja"
+ # Authentication
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: vikunja-postgresql
- key: postgresql-password
- - name: POSTGRES_DB
- value: "vikunja"
+ key: postgres-password
+ # Replication
+ # Initdb
+ # Standby
+ # LDAP
- name: POSTGRESQL_ENABLE_LDAP
value: "no"
+ # TLS
- name: POSTGRESQL_ENABLE_TLS
value: "no"
+ # Audit
- name: POSTGRESQL_LOG_HOSTNAME
value: "false"
- name: POSTGRESQL_LOG_CONNECTIONS
@@ -343,6 +346,7 @@
value: "false"
- name: POSTGRESQL_PGAUDIT_LOG_CATALOG
value: "off"
+ # Others
- name: POSTGRESQL_CLIENT_MIN_MESSAGES
value: "error"
- name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
@@ -351,43 +355,53 @@
- name: tcp-postgresql
containerPort: 5432
livenessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- - exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
- initialDelaySeconds: 30
+ - exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
+ readinessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 5
periodSeconds: 10
- timeoutSeconds: 5
successThreshold: 1
- failureThreshold: 6
- readinessProbe:
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- -e
- |
- exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
+ exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
[ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
- initialDelaySeconds: 5
- periodSeconds: 10
- timeoutSeconds: 5
- successThreshold: 1
- failureThreshold: 6
+ resources:
+ limits: {}
+ requests:
+ cpu: 250m
+ memory: 256Mi
volumeMounts:
- name: dshm
mountPath: /dev/shm
- name: data
mountPath: /bitnami/postgresql
- subPath:
volumes:
- name: dshm
emptyDir:
medium: Memory
- - name: data
- persistentVolumeClaim:
- claimName: vikunja-postgresql-pvc
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
---
# Source: vikunja/templates/common.yaml
apiVersion: networking.k8s.io/v1
Path: k8s/clusters/cluster-0/manifests/collab/vikunja/helm-release.yaml
Version: 5.5.3 -> 6.1.2
@@ -4,15 +4,15 @@
kind: Secret
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- namespace: default
type: Opaque
data:
- postgresql-postgres-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19BRE1JTl9QQVNTV09SRH0="
- postgresql-password: "JHtTRUNSRVRfVklLVU5KQV9QT1NUR1JFU19QQVNTV09SRH0="
+ postgres-password: "QlNzM0dGQ0VIVg=="
+ # We don't auto-generate LDAP password when it's not provided as we do for other passwords
---
# Source: vikunja/templates/configmap.yaml
apiVersion: v1
@@ -59,21 +59,22 @@
service:
jwtsecret: "myVeryComplexJWTSecret"
---
-# Source: vikunja/charts/postgresql/templates/svc-headless.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc-headless.yaml
apiVersion: v1
kind: Service
metadata:
- name: vikunja-postgresql-headless
+ name: vikunja-postgresql-hl
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
# Use this annotation in addition to the actual publishNotReadyAddresses
# field below because the annotation will stop being respected soon but the
# field is broken in some versions of Kubernetes:
# https://github.com/kubernetes/kubernetes/issues/58662
service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
- namespace: default
spec:
type: ClusterIP
clusterIP: None
@@ -88,28 +89,32 @@
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
+ app.kubernetes.io/component: primary
---
-# Source: vikunja/charts/postgresql/templates/svc.yaml
+# Source: vikunja/charts/postgresql/templates/primary/svc.yaml
apiVersion: v1
kind: Service
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
type: ClusterIP
+ sessionAffinity: None
ports:
- name: tcp-postgresql
port: 5432
targetPort: tcp-postgresql
+ nodePort: null
selector:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
---
# Source: vikunja/templates/common.yaml
apiVersion: v1
@@ -248,28 +253,29 @@
configMap:
name: vikunja-config
---
-# Source: vikunja/charts/postgresql/templates/statefulset.yaml
+# Source: vikunja/charts/postgresql/templates/primary/statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: vikunja-postgresql
+ namespace: "default"
labels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: primary
annotations:
- namespace: default
spec:
- serviceName: vikunja-postgresql-headless
replicas: 1
+ serviceName: vikunja-postgresql-hl
updateStrategy:
+ rollingUpdate: {}
type: RollingUpdate
selector:
matchLabels:
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
- role: primary
+ app.kubernetes.io/component: primary
template:
metadata:
name: vikunja-postgresql
@@ -277,9 +283,10 @@
app.kubernetes.io/name: postgresql
app.kubernetes.io/instance: vikunja
app.kubernetes.io/managed-by: Helm
- role: primary
app.kubernetes.io/component: primary
+ annotations:
spec:
+ serviceAccountName: default
affinity:
podAffinity:
podAntiAffinity:
@@ -297,15 +304,13 @@
nodeAffinity:
securityContext:
fsGroup: 1001
- automountServiceAccountToken: false
+ hostNetwork: false
+ hostIPC: false
+ initContainers:
containers:
- - name: vikunja-postgresql
- image: docker.io/bitnami/postgresql:11.14.0-debian-10-r28
+ - name: postgresql
+ image: docker.io/bitnami/postgresql:14.4.0-debian-11-r4
imagePullPolicy: "IfNotPresent"
- resources:
- requests:
- cpu: 250m
- memory: 256Mi
securityContext:
runAsUser: 1001
env:
@@ -317,24 +322,22 @@
value: "/bitnami/postgresql"
- name: PGDATA
value: "/bitnami/postgresql/data"
- - name: POSTGRES_POSTGRES_PASSWORD
- valueFrom:
- secretKeyRef:
- name: vikunja-postgresql
- key: postgresql-postgres-password
- - name: POSTGRES_USER
- value: "vikunja"
+ # Authentication
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: vikunja-postgresql
- key: postgresql-password
- - name: POSTGRES_DB
- value: "vikunja"
+ key: postgres-password
+ # Replication
+ # Initdb
+ # Standby
+ # LDAP
- name: POSTGRESQL_ENABLE_LDAP
value: "no"
+ # TLS
- name: POSTGRESQL_ENABLE_TLS
value: "no"
+ # Audit
- name: POSTGRESQL_LOG_HOSTNAME
value: "false"
- name: POSTGRESQL_LOG_CONNECTIONS
@@ -343,6 +346,7 @@
value: "false"
- name: POSTGRESQL_PGAUDIT_LOG_CATALOG
value: "off"
+ # Others
- name: POSTGRESQL_CLIENT_MIN_MESSAGES
value: "error"
- name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
@@ -351,43 +355,53 @@
- name: tcp-postgresql
containerPort: 5432
livenessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ successThreshold: 1
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- - exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
- initialDelaySeconds: 30
+ - exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
+ readinessProbe:
+ failureThreshold: 6
+ initialDelaySeconds: 5
periodSeconds: 10
- timeoutSeconds: 5
successThreshold: 1
- failureThreshold: 6
- readinessProbe:
+ timeoutSeconds: 5
exec:
command:
- /bin/sh
- -c
- -e
- |
- exec pg_isready -U "vikunja" -d "dbname=vikunja" -h 127.0.0.1 -p 5432
+ exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432
[ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
- initialDelaySeconds: 5
- periodSeconds: 10
- timeoutSeconds: 5
- successThreshold: 1
- failureThreshold: 6
+ resources:
+ limits: {}
+ requests:
+ cpu: 250m
+ memory: 256Mi
volumeMounts:
- name: dshm
mountPath: /dev/shm
- name: data
mountPath: /bitnami/postgresql
- subPath:
volumes:
- name: dshm
emptyDir:
medium: Memory
- - name: data
- persistentVolumeClaim:
- claimName: vikunja-postgresql-pvc
+ volumeClaimTemplates:
+ - metadata:
+ name: data
+ spec:
+ accessModes:
+ - "ReadWriteOnce"
+ resources:
+ requests:
+ storage: "8Gi"
---
# Source: vikunja/templates/common.yaml
apiVersion: networking.k8s.io/v1