commit 1d0ebc86f4adb81db6e6997742ad6ae34f83a05d
parent 88801335a4db9048f77d29924b617d3d9e91c0a2
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Thu, 7 Aug 2025 14:02:48 +0200
Try to tune the db again
Diffstat:
3 files changed, 123 insertions(+), 422 deletions(-)
diff --git a/infrastructure_talos/configs/cnpg-base.yaml b/infrastructure_talos/configs/cnpg-base.yaml
@@ -0,0 +1,54 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+ name: postgres-cluster
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0N1BGMnF0aXJyMDA5QUl6
+ TnFSbzM5NERsOTRWRktOTHkxd21xaVhXckQwClA0MVphWFBiQUdjMWdpVSt3Tk1h
+ ZEo0NmdkTVZJM2k3ek01RFVzanFjMmsKLS0tIHBIVTBGbWN4a2taZUwwVjNnZ2VI
+ UkZsYnRCdEF2UzRpZlh2YWJvSS9Rc3cK+/a5ffH1YpdTLncgjKKdsySfWWsvHD8S
+ Raz0fKLqubw0haQymE00nwO55Xle8uFpT5EUw0mde6uk6qw94oUd4w==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-08-07T11:54:40Z"
+ mac: ENC[AES256_GCM,data:sevTqr3PEaBa2y/yXkHffu8HVC8FF6ZT+ECEbbcCZLEoaoqFjpnMboQJ8N4hVnI9EgyHDtHIbJm7XasNwoxxKPj7g00Y6hVqKELaZ5xV8K0HX5jWkIfZDBLjVjt8vCy7q2G0Qt9xk/L4bdInaeYsdxMwFX3IIfnKeCObKPKnJos=,iv:sgP/rT1CxnGbSyfy6tUn4Eul3iRmFREp36YRpbvV/yQ=,tag:Zj1fbyiNvTYnH8cugd7tMA==,type:str]
+ pgp: []
+ encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ name: pg-s3-credentials
+ namespace: postgres-cluster
+type: Opaque
+stringData:
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:7vfRcwqHX/ZWAL7iWwUt8TImlMM=,iv:NdWhotFN0HG+z6ev0HStZzeLeh8/8JsuEkr3Fxu7yMw=,tag:Rm/wZcV+Vyb8joY95gG04w==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:lngfjs9DGvwTEpNjbSDC1cPoVY/9PHrcNVlke/oMr9b+br8MoBD9oA==,iv:L8lY0NpVvJwZIaj+wMEcoQCknvh8bdTZyboDaaYjkcQ=,tag:O+Sc3MOQAp1W6htnXawxKw==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0N1BGMnF0aXJyMDA5QUl6
+ TnFSbzM5NERsOTRWRktOTHkxd21xaVhXckQwClA0MVphWFBiQUdjMWdpVSt3Tk1h
+ ZEo0NmdkTVZJM2k3ek01RFVzanFjMmsKLS0tIHBIVTBGbWN4a2taZUwwVjNnZ2VI
+ UkZsYnRCdEF2UzRpZlh2YWJvSS9Rc3cK+/a5ffH1YpdTLncgjKKdsySfWWsvHD8S
+ Raz0fKLqubw0haQymE00nwO55Xle8uFpT5EUw0mde6uk6qw94oUd4w==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-08-07T11:54:40Z"
+ mac: ENC[AES256_GCM,data:sevTqr3PEaBa2y/yXkHffu8HVC8FF6ZT+ECEbbcCZLEoaoqFjpnMboQJ8N4hVnI9EgyHDtHIbJm7XasNwoxxKPj7g00Y6hVqKELaZ5xV8K0HX5jWkIfZDBLjVjt8vCy7q2G0Qt9xk/L4bdInaeYsdxMwFX3IIfnKeCObKPKnJos=,iv:sgP/rT1CxnGbSyfy6tUn4Eul3iRmFREp36YRpbvV/yQ=,tag:Zj1fbyiNvTYnH8cugd7tMA==,type:str]
+ pgp: []
+ encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
diff --git a/infrastructure_talos/configs/cnpg-cluster.yaml b/infrastructure_talos/configs/cnpg-cluster.yaml
@@ -1,57 +1,3 @@
-apiVersion: v1
-kind: Namespace
-metadata:
- name: postgres-cluster
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
----
-apiVersion: v1
-kind: Secret
-metadata:
- name: pg-s3-credentials
- namespace: postgres-cluster
-type: Opaque
-stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:WozCt8mbFV+30Ha3UYTw0x5cRBc=,iv:6D6PhEDjXYBEN/SgVev/cch24j5IGVh3hBKkItgUxbI=,tag:VOQcKIAebUKoBlBRr6biPQ==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:OMoDUDaXZ59ghwHkSDNSmFX+A9GuhOiZck1DXfDxuAUstiMdfkt6Pw==,iv:6bnUUC13lxx26gR2qkobSCGx+6a1irkC5dKWTURRpko=,tag:Xm5FnTR9PnZwIKQ4pBKYWA==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
@@ -72,50 +18,50 @@ spec:
# Connectivity
max_connections: "220"
superuser_reserved_connections: "5"
- # # Memory Settings
- # shared_buffers: 2048 MB
- # work_mem: 32 MB
- # maintenance_work_mem: 320 MB
- # huge_pages: "off"
- # effective_cache_size: 6 GB
- # effective_io_concurrency: "150"
- # random_page_cost: "1.5"
- # # Monitoring
- # track_io_timing: "on"
- # # track execution times of pl-language procedures if any
- # track_functions: pl
- # # Replication
- # max_wal_senders: "10"
- # # Checkpointing
- # checkpoint_timeout: 15 min
- # checkpoint_completion_target: "0.9"
- # max_wal_size: 1024 MB
- # min_wal_size: 512 MB
- # # WAL writing
- # wal_compression: "on"
- # wal_buffers: "-1"
- # wal_writer_delay: 200ms
- # wal_writer_flush_after: 1MB
- # wal_keep_size: 3650 MB
- # # Background writer
- # bgwriter_delay: 200ms
- # bgwriter_lru_maxpages: "100"
- # bgwriter_lru_multiplier: "2.0"
- # bgwriter_flush_after: "0"
- # # Parallel queries:
- # max_worker_processes: "5"
- # max_parallel_workers_per_gather: "3"
- # max_parallel_maintenance_workers: "3"
- # max_parallel_workers: "5"
- # parallel_leader_participation: "on"
- # # Advanced features
- # enable_partitionwise_join: "on"
- # enable_partitionwise_aggregate: "on"
- # jit: "on"
- # max_slot_wal_keep_size: 1000 MB
- # track_wal_io_timing: "on"
- # maintenance_io_concurrency: "150"
- # wal_recycle: "on"
+ # Memory Settings
+ shared_buffers: 2048 MB
+ work_mem: 32 MB
+ maintenance_work_mem: 320 MB
+ huge_pages: "off"
+ effective_cache_size: 6 GB
+ effective_io_concurrency: "150"
+ random_page_cost: "1.5"
+ # Monitoring
+ track_io_timing: "on"
+ # track execution times of pl-language procedures if any
+ track_functions: pl
+ # Replication
+ max_wal_senders: "10"
+ # Checkpointing
+ checkpoint_timeout: 15 min
+ checkpoint_completion_target: "0.9"
+ max_wal_size: 1024 MB
+ min_wal_size: 512 MB
+ # WAL writing
+ wal_compression: "on"
+ wal_buffers: "-1"
+ wal_writer_delay: 200ms
+ wal_writer_flush_after: 1MB
+ wal_keep_size: 3650 MB
+ # Background writer
+ bgwriter_delay: 200ms
+ bgwriter_lru_maxpages: "100"
+ bgwriter_lru_multiplier: "2.0"
+ bgwriter_flush_after: "0"
+ # Parallel queries:
+ max_worker_processes: "6"
+ max_parallel_workers_per_gather: "3"
+ max_parallel_maintenance_workers: "3"
+ max_parallel_workers: "6"
+ parallel_leader_participation: "on"
+ # Advanced features
+ enable_partitionwise_join: "on"
+ enable_partitionwise_aggregate: "on"
+ jit: "on"
+ max_slot_wal_keep_size: 1000 MB
+ track_wal_io_timing: "on"
+ maintenance_io_concurrency: "150"
+ wal_recycle: "on"
# #pg_hba:
# # - host all bugzilla all md5
backup:
@@ -127,17 +73,17 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:AKX5W97Od0XwnbMF3A==,iv:cc39IBOe+FLY/wT/EGZbQoZ8MFZwXWg+ixLcERrFBLA=,tag:8iP4vhhh/n0bNt1k1AzfoA==,type:str]
+ key: ACCESS_KEY_ID
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:oKs1pGMDg6whYNvcWIx7h9A=,iv:nqFxBb8Rt1zoWwur+Pb4huyIIsL3Z7KYQ77835Uakrs=,tag:AlB/AJjjwZm/DL9pN2gyMQ==,type:str]
+ key: ACCESS_SECRET_KEY
wal:
compression: gzip
maxParallel: 2
data:
- compression: ENC[AES256_GCM,data:0oc5LA==,iv:7TI7WzTL2q/FXGfQSfmV9IK1H3Bmz7JG7z9qWxFSwTI=,tag:frQwPbZbHFeLtc8uHxaw2g==,type:str]
- immediateCheckpoint: ENC[AES256_GCM,data:stNxpQ==,iv:P4Luo8YUSRgM77lI8oksm2QLizbIhKGORFr2Nwcbi+A=,tag:QXQcnHErM9mICCHf+RVkvg==,type:bool]
- jobs: ENC[AES256_GCM,data:ig==,iv:UYfjd36vCoYgDJCFmah01FOZtMHl+Ikof4G2zab+Mhs=,tag:iaC6GiSBwGKqp3R1eNlCgw==,type:int]
+ compression: gzip
+ immediateCheckpoint: true
+ jobs: 2
managed:
roles:
- name: freshrss
@@ -145,139 +91,119 @@ spec:
login: true
superuser: false
passwordSecret:
- name: freshrss
+ name: freshrss
- name: meowlnir
ensure: present
login: true
comment: Read Only Access for synapse required but RW to meowlnir db
superuser: false
passwordSecret:
- name: meowlnir
+ name: meowlnir
- name: connectivity-tester-stage
ensure: present
login: true
superuser: false
passwordSecret:
- name: connectivity-tester-stage
+ name: connectivity-tester-stage
- name: connectivity-tester
ensure: present
login: true
superuser: false
passwordSecret:
- name: connectivity-tester
+ name: connectivity-tester
- name: draupnir_synapse
ensure: present
login: true
superuser: false
passwordSecret:
- name: draupnir-synapse
+ name: draupnir-synapse
- name: authentik
ensure: present
login: true
superuser: false
passwordSecret:
- name: authentik
+ name: authentik
- name: ejabberd
ensure: present
login: true
superuser: false
passwordSecret:
- name: ejabberd
+ name: ejabberd
- name: vaultwarden
ensure: present
login: true
superuser: false
passwordSecret:
- name: vaultwarden
+ name: vaultwarden
- name: mastodon
ensure: present
login: true
superuser: false
passwordSecret:
- name: mastodon
+ name: mastodon
- name: openproject
ensure: present
login: true
superuser: false
passwordSecret:
- name: openproject
+ name: openproject
- name: plausible
ensure: present
login: true
superuser: false
passwordSecret:
- name: plausible
+ name: plausible
- name: coder
ensure: present
login: true
superuser: false
passwordSecret:
- name: coder
+ name: coder
- name: matrix_auth
ensure: present
login: true
superuser: false
passwordSecret:
- name: matrix-auth
+ name: matrix-auth
- name: cachet
ensure: present
login: true
superuser: false
passwordSecret:
- name: cachet
+ name: cachet
- name: docuseal
ensure: present
login: true
superuser: false
passwordSecret:
- name: docuseal
+ name: docuseal
- name: bugzilla
ensure: present
login: true
superuser: false
passwordSecret:
- name: bugzilla
+ name: bugzilla
- name: rundeck
ensure: present
login: true
superuser: false
passwordSecret:
- name: rundeck
+ name: rundeck
- name: plane
ensure: present
login: true
superuser: false
passwordSecret:
- name: plane
+ name: plane
- name: gotosocial
ensure: present
login: true
superuser: false
passwordSecret:
- name: gotosocial
+ name: gotosocial
storage:
storageClass: hcloud-volumes
size: 15Gi
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: monitoring.coreos.com/v1
kind: PodMonitor
@@ -290,26 +216,6 @@ spec:
cnpg.io/cluster: pg-cluster-v2
podMetricsEndpoints:
- port: metrics
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
@@ -323,26 +229,6 @@ spec:
immediate: true
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -354,26 +240,6 @@ spec:
owner: rundeck
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -385,26 +251,6 @@ spec:
owner: plane
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -416,26 +262,6 @@ spec:
owner: meowlnir
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -447,26 +273,6 @@ spec:
owner: connectivity-tester-stage
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -478,26 +284,6 @@ spec:
owner: connectivity-tester
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -509,26 +295,6 @@ spec:
owner: freshrss
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -541,26 +307,6 @@ spec:
ensure: absent
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -573,26 +319,6 @@ spec:
ensure: present
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -605,26 +331,6 @@ spec:
ensure: present
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -637,26 +343,6 @@ spec:
ensure: present
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -669,26 +355,6 @@ spec:
ensure: present
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
---
apiVersion: postgresql.cnpg.io/v1
kind: Database
@@ -701,23 +367,3 @@ spec:
ensure: present
cluster:
name: pg-cluster-v2
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVGVvZE1oOWtyUmoxK0t3
- SU9KaS9LTXVOc3RtS0NMMXRwSEJpazlwMXpBCmhTbWFad245aXJFc3ZCOXEwTlJX
- N0VrQ2kydzVNVGtXUUJ1ZHpJTVNyNmcKLS0tIE5BTW4xZFNLakNxSVJVZGpYRTAv
- ZzA1SFJhNmlXemNJZkkxM3FvSStEWFEK2/EbGkATvV81LXQ7hBHC+PdeNtsFi70M
- 2qXh13FGFnYnM0o+BwHvchTFmtLDEd9ezChybluW6bj9sWD3GhUa2w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-04T10:11:25Z"
- mac: ENC[AES256_GCM,data:viniKEnbFSiEnp33IFrfiIicqFyotuKMKxQo6pfPKpkc2kZXaUcNnezJoArU3h4X7m1ejNWi9N5eqh5QI0AZAvxos3wDpKSa3tsWAYQ+3HZRwVF+Ff/sYtDHjHhYsjs10TvGYcMc8HkWOc7BKJcoXB8QvHYStV6oIDOOKZmFwAo=,iv:BydPhgo9iNoKAKmJIuwyCHLqi73MOjTWWCTdBGktblw=,tag:e3vedGoMPdzChd1sTbVi4w==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
diff --git a/infrastructure_talos/configs/kustomization.yaml b/infrastructure_talos/configs/kustomization.yaml
@@ -4,4 +4,5 @@ resources:
- cluster-issuers.yaml
- pg-secrets.yaml
- cnpg-cluster-barmancloud-ext.yaml
+ - cnpg-base.yaml
- cnpg-cluster.yaml
