commit 3783b710ccdf7d3acd69a39f60abf08222966021
parent 6eac3b8340ca2fdc8204d92666c9cd2ac84193a7
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Tue, 8 Jul 2025 12:13:26 +0200
Tweak the pg cluster
Diffstat:
3 files changed, 74 insertions(+), 66 deletions(-)
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -11,14 +11,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
- SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
- d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
- VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
- VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SFNpc2dGZnZHdzAzeXRQ
+ cmorZlg2eCtVWWdqazNZWHRsTGl5aVpYMUZZCk9oVjg0UVdBSmRUVGRnMGovUXdu
+ aDg4aEV3cWRqUE40Q0g4TE0rWVo3UmsKLS0tIE5HaFJFcjNCbHBHRHFLcWRqR2Jt
+ bi9Ha0NVcGF0VUY3RUx0K0dqTithcXcKZyPpkkTjL8W8RmkN52ZtsJDVlF5RAdUt
+ iMvVnXSwn0EN5xXBi6Bq+hQejJtewLO2qr1qcRd12qAWHHdTjnHKLQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-06-14T18:57:27Z"
- mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
+ lastmodified: "2025-07-08T10:13:15Z"
+ mac: ENC[AES256_GCM,data:c0+D84zkwtXu+OvFp/Rfg/Dt8mBykS9304mohxT8zLcedhNCmoC4WSg9BmEUMPPZ96gbAS/q1QJJz784W2Wz0sk1GySWwIKOdljwv+r5+aW6/BZ8Kq2QzPX8aCdj9/zzXkFz+hQJjUpTK9Rb5FS6IdRsg4/qDc3BumoIQ4f2K/Q=,iv:M3n5oDdEQtCb/929OUJXD5IAIyjAtIngb1Q5DAqcV9g=,tag:KOpv2Os0ho7mOcq+ad+7rw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -30,8 +30,8 @@ metadata:
namespace: postgres-cluster
type: Opaque
stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:Re+xbPgwECJz7kSHljGQPlB+PoM=,iv:1AeNb5gpbeK62IRYC6htHcircZGDFGebE5zkg3RLZ6A=,tag:PurgvywIb1dnLpzvqYh3YQ==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:kdQJDs+IQviMjIB1fbgd4ofowjH0Yf5J+LesXRsuje07PfFQPjyyFQ==,iv:gh7tdf7rySU6kT4DUKWdobLTY3hIii8ecMAJyD9Gc8Q=,tag:pOOtqcFOJmYgFw9xfCiKFQ==,type:str]
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:scVwtkLaa/AWFsGIP9P4v7NViF0=,iv:2f81bVGOaSvHoWDU7Ymrld7Uq5/uyU5ee4DPGhLRiUg=,tag:g6q95ablAY27WdekAVJ56w==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:Cwx5tS+sOpQ+iSiflf1IPJq0NFIZsF/wIBd6+eC21S7Vvjf5rAxo7w==,iv:cuCn0Pe4+kCSnnSz9cBnaKnWEtLYDbWKCJu/BEtRwOQ=,tag:ld7roPPlzzMAZ5ubUeqO/g==,type:str]
sops:
kms: []
gcp_kms: []
@@ -41,14 +41,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
- SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
- d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
- VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
- VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SFNpc2dGZnZHdzAzeXRQ
+ cmorZlg2eCtVWWdqazNZWHRsTGl5aVpYMUZZCk9oVjg0UVdBSmRUVGRnMGovUXdu
+ aDg4aEV3cWRqUE40Q0g4TE0rWVo3UmsKLS0tIE5HaFJFcjNCbHBHRHFLcWRqR2Jt
+ bi9Ha0NVcGF0VUY3RUx0K0dqTithcXcKZyPpkkTjL8W8RmkN52ZtsJDVlF5RAdUt
+ iMvVnXSwn0EN5xXBi6Bq+hQejJtewLO2qr1qcRd12qAWHHdTjnHKLQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-06-14T18:57:27Z"
- mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
+ lastmodified: "2025-07-08T10:13:15Z"
+ mac: ENC[AES256_GCM,data:c0+D84zkwtXu+OvFp/Rfg/Dt8mBykS9304mohxT8zLcedhNCmoC4WSg9BmEUMPPZ96gbAS/q1QJJz784W2Wz0sk1GySWwIKOdljwv+r5+aW6/BZ8Kq2QzPX8aCdj9/zzXkFz+hQJjUpTK9Rb5FS6IdRsg4/qDc3BumoIQ4f2K/Q=,iv:M3n5oDdEQtCb/929OUJXD5IAIyjAtIngb1Q5DAqcV9g=,tag:KOpv2Os0ho7mOcq+ad+7rw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -119,6 +119,7 @@ spec:
# #pg_hba:
# # - host all bugzilla all md5
backup:
+ target: prefer-standby
retentionPolicy: 30d
barmanObjectStore:
destinationPath: s3://midnightthoughts-pg-backup/pg-base-backup
@@ -126,16 +127,17 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:zYpbPgI0R38USnWqWQ==,iv:LyfNegRSNyQ7qbj5XRIDUgLPvn94/fBiqJFlDfC/56g=,tag:qTuImCl9AjfwZiCOacKxIQ==,type:str]
+ key: ENC[AES256_GCM,data:sKUfy/9U2P6I8wsTOA==,iv:J+5jUMHBfZcKfrwbnaOccuFaqqvbitPXDNK1AxoZMtY=,tag:KJz52PMtSogXe+jb6al40A==,type:str]
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:vokHpFRoweR3yTXjP3M1yNo=,iv:pNCYebwWKFH09wEr6VzWjxtpPzlkscdADRVtRK4lKMI=,tag:zCJS4x9AMtLz6HOV2LWXQQ==,type:str]
+ key: ENC[AES256_GCM,data:UCzGtSJxVqb+c6t4BNbTGLM=,iv:zPVsSKIJNfwJdQ0DU5mh+aCu5FDW2aTJ85i4hhU9ZDg=,tag:OevfYjlXPZKK5e1uUw17bA==,type:str]
wal:
compression: gzip
- maxParallel: 8
+ maxParallel: 2
data:
- compression: ENC[AES256_GCM,data:jnpYVA==,iv:TYjYMTVzXvbg3GpYGvmRSrmtXnZeMXCuzW3z8p0XoAc=,tag:FPrGd69ET7C4zKO8SxguIA==,type:str]
- immediateCheckpoint: ENC[AES256_GCM,data:oybt4A==,iv:f8Wa9702eqx5n/6afMu3tuiudCL+oDtTI+0q3FTMFuQ=,tag:S7TfX77bmOjtWjNRsgvtRQ==,type:bool]
+ compression: ENC[AES256_GCM,data:OaHDIg==,iv:+MNvbLoJcd5ogYZHcPNiOl0msEPPiE4aFSVR9V3ocKs=,tag:H6vtz8DXrmPsfvCuBXd6/w==,type:str]
+ immediateCheckpoint: ENC[AES256_GCM,data:g/hvGw==,iv:Q3q7xmha1k49S5ibFp/g077EAR12g1TZn7bvTWFMSVs=,tag:L37MuGMSl7jQWyE+hlyzsw==,type:bool]
+ jobs: ENC[AES256_GCM,data:EA==,iv:XZ0Cy3vnz16Ia1stJ/v8jcj5rQmShabXyB7oc2/9rcM=,tag:9l3yryKE2nEEFo04iQP/ww==,type:int]
managed:
roles:
- name: synapse
@@ -295,14 +297,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
- SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
- d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
- VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
- VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SFNpc2dGZnZHdzAzeXRQ
+ cmorZlg2eCtVWWdqazNZWHRsTGl5aVpYMUZZCk9oVjg0UVdBSmRUVGRnMGovUXdu
+ aDg4aEV3cWRqUE40Q0g4TE0rWVo3UmsKLS0tIE5HaFJFcjNCbHBHRHFLcWRqR2Jt
+ bi9Ha0NVcGF0VUY3RUx0K0dqTithcXcKZyPpkkTjL8W8RmkN52ZtsJDVlF5RAdUt
+ iMvVnXSwn0EN5xXBi6Bq+hQejJtewLO2qr1qcRd12qAWHHdTjnHKLQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-06-14T18:57:27Z"
- mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
+ lastmodified: "2025-07-08T10:13:15Z"
+ mac: ENC[AES256_GCM,data:c0+D84zkwtXu+OvFp/Rfg/Dt8mBykS9304mohxT8zLcedhNCmoC4WSg9BmEUMPPZ96gbAS/q1QJJz784W2Wz0sk1GySWwIKOdljwv+r5+aW6/BZ8Kq2QzPX8aCdj9/zzXkFz+hQJjUpTK9Rb5FS6IdRsg4/qDc3BumoIQ4f2K/Q=,iv:M3n5oDdEQtCb/929OUJXD5IAIyjAtIngb1Q5DAqcV9g=,tag:KOpv2Os0ho7mOcq+ad+7rw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -327,14 +329,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
- SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
- d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
- VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
- VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SFNpc2dGZnZHdzAzeXRQ
+ cmorZlg2eCtVWWdqazNZWHRsTGl5aVpYMUZZCk9oVjg0UVdBSmRUVGRnMGovUXdu
+ aDg4aEV3cWRqUE40Q0g4TE0rWVo3UmsKLS0tIE5HaFJFcjNCbHBHRHFLcWRqR2Jt
+ bi9Ha0NVcGF0VUY3RUx0K0dqTithcXcKZyPpkkTjL8W8RmkN52ZtsJDVlF5RAdUt
+ iMvVnXSwn0EN5xXBi6Bq+hQejJtewLO2qr1qcRd12qAWHHdTjnHKLQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-06-14T18:57:27Z"
- mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
+ lastmodified: "2025-07-08T10:13:15Z"
+ mac: ENC[AES256_GCM,data:c0+D84zkwtXu+OvFp/Rfg/Dt8mBykS9304mohxT8zLcedhNCmoC4WSg9BmEUMPPZ96gbAS/q1QJJz784W2Wz0sk1GySWwIKOdljwv+r5+aW6/BZ8Kq2QzPX8aCdj9/zzXkFz+hQJjUpTK9Rb5FS6IdRsg4/qDc3BumoIQ4f2K/Q=,iv:M3n5oDdEQtCb/929OUJXD5IAIyjAtIngb1Q5DAqcV9g=,tag:KOpv2Os0ho7mOcq+ad+7rw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -345,9 +347,9 @@ metadata:
name: hetzner-base-backup
namespace: postgres-cluster
spec:
- schedule: 0 5 4 * * 3
+ schedule: 0 5 4 * * */3
backupOwnerReference: self
- target: prefer-standby
+ method: barmanObjectStore
immediate: true
cluster:
name: pg-cluster-v2
@@ -360,14 +362,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
- SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
- d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
- VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
- VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SFNpc2dGZnZHdzAzeXRQ
+ cmorZlg2eCtVWWdqazNZWHRsTGl5aVpYMUZZCk9oVjg0UVdBSmRUVGRnMGovUXdu
+ aDg4aEV3cWRqUE40Q0g4TE0rWVo3UmsKLS0tIE5HaFJFcjNCbHBHRHFLcWRqR2Jt
+ bi9Ha0NVcGF0VUY3RUx0K0dqTithcXcKZyPpkkTjL8W8RmkN52ZtsJDVlF5RAdUt
+ iMvVnXSwn0EN5xXBi6Bq+hQejJtewLO2qr1qcRd12qAWHHdTjnHKLQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-06-14T18:57:27Z"
- mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
+ lastmodified: "2025-07-08T10:13:15Z"
+ mac: ENC[AES256_GCM,data:c0+D84zkwtXu+OvFp/Rfg/Dt8mBykS9304mohxT8zLcedhNCmoC4WSg9BmEUMPPZ96gbAS/q1QJJz784W2Wz0sk1GySWwIKOdljwv+r5+aW6/BZ8Kq2QzPX8aCdj9/zzXkFz+hQJjUpTK9Rb5FS6IdRsg4/qDc3BumoIQ4f2K/Q=,iv:M3n5oDdEQtCb/929OUJXD5IAIyjAtIngb1Q5DAqcV9g=,tag:KOpv2Os0ho7mOcq+ad+7rw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -391,14 +393,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
- SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
- d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
- VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
- VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SFNpc2dGZnZHdzAzeXRQ
+ cmorZlg2eCtVWWdqazNZWHRsTGl5aVpYMUZZCk9oVjg0UVdBSmRUVGRnMGovUXdu
+ aDg4aEV3cWRqUE40Q0g4TE0rWVo3UmsKLS0tIE5HaFJFcjNCbHBHRHFLcWRqR2Jt
+ bi9Ha0NVcGF0VUY3RUx0K0dqTithcXcKZyPpkkTjL8W8RmkN52ZtsJDVlF5RAdUt
+ iMvVnXSwn0EN5xXBi6Bq+hQejJtewLO2qr1qcRd12qAWHHdTjnHKLQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-06-14T18:57:27Z"
- mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
+ lastmodified: "2025-07-08T10:13:15Z"
+ mac: ENC[AES256_GCM,data:c0+D84zkwtXu+OvFp/Rfg/Dt8mBykS9304mohxT8zLcedhNCmoC4WSg9BmEUMPPZ96gbAS/q1QJJz784W2Wz0sk1GySWwIKOdljwv+r5+aW6/BZ8Kq2QzPX8aCdj9/zzXkFz+hQJjUpTK9Rb5FS6IdRsg4/qDc3BumoIQ4f2K/Q=,iv:M3n5oDdEQtCb/929OUJXD5IAIyjAtIngb1Q5DAqcV9g=,tag:KOpv2Os0ho7mOcq+ad+7rw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -422,14 +424,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
- SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
- d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
- VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
- VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SFNpc2dGZnZHdzAzeXRQ
+ cmorZlg2eCtVWWdqazNZWHRsTGl5aVpYMUZZCk9oVjg0UVdBSmRUVGRnMGovUXdu
+ aDg4aEV3cWRqUE40Q0g4TE0rWVo3UmsKLS0tIE5HaFJFcjNCbHBHRHFLcWRqR2Jt
+ bi9Ha0NVcGF0VUY3RUx0K0dqTithcXcKZyPpkkTjL8W8RmkN52ZtsJDVlF5RAdUt
+ iMvVnXSwn0EN5xXBi6Bq+hQejJtewLO2qr1qcRd12qAWHHdTjnHKLQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-06-14T18:57:27Z"
- mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
+ lastmodified: "2025-07-08T10:13:15Z"
+ mac: ENC[AES256_GCM,data:c0+D84zkwtXu+OvFp/Rfg/Dt8mBykS9304mohxT8zLcedhNCmoC4WSg9BmEUMPPZ96gbAS/q1QJJz784W2Wz0sk1GySWwIKOdljwv+r5+aW6/BZ8Kq2QzPX8aCdj9/zzXkFz+hQJjUpTK9Rb5FS6IdRsg4/qDc3BumoIQ4f2K/Q=,iv:M3n5oDdEQtCb/929OUJXD5IAIyjAtIngb1Q5DAqcV9g=,tag:KOpv2Os0ho7mOcq+ad+7rw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -453,14 +455,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TXp3ZlIwTkttUkJSTEUx
- SEM5K2s0QVVveXRWeGJldmJWRDFMbmxrNWpzCkVKcCs4UGw0OEZrWXhzZXJmUHND
- d1MxWkNSODZZZzZJSStKODVwR1JMMDQKLS0tIGJhc0VUWmF6dGxIa3poOVJ3dW52
- VGVwM2pOT3R4UTJ5Q0NIS3hkVGorYUEKXA4Sy9JHvx9LADY5svwZaEq3FaqOvtlh
- VmCJ5c6NCnIv+qwHOoweuI5V+z1YFruGaNnRZPbBALOlu0WhDpFa4w==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SFNpc2dGZnZHdzAzeXRQ
+ cmorZlg2eCtVWWdqazNZWHRsTGl5aVpYMUZZCk9oVjg0UVdBSmRUVGRnMGovUXdu
+ aDg4aEV3cWRqUE40Q0g4TE0rWVo3UmsKLS0tIE5HaFJFcjNCbHBHRHFLcWRqR2Jt
+ bi9Ha0NVcGF0VUY3RUx0K0dqTithcXcKZyPpkkTjL8W8RmkN52ZtsJDVlF5RAdUt
+ iMvVnXSwn0EN5xXBi6Bq+hQejJtewLO2qr1qcRd12qAWHHdTjnHKLQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-06-14T18:57:27Z"
- mac: ENC[AES256_GCM,data:8LGhmqrRr6s0fXZzGEEfPft8p8AF7m+1X7yAJgs93fLdy/RTii3WqbIOewaD8M7YraSk7O+cVKAm+zC5BJ3cVzo7vHzKxo1X/V8Zfnh9cMsNAJ2j/sO3wkgGaugXC6hnmPI9O2iRX4ONmpNYtdxYUCvRs52mqrXYPEvOxzUAWaQ=,iv:qumewv+wXhJkkOIhZ2JIhRcu56fZ6E+2ITdNpw1Yle0=,tag:DTrSie2axx9RKwBIAIHKcw==,type:str]
+ lastmodified: "2025-07-08T10:13:15Z"
+ mac: ENC[AES256_GCM,data:c0+D84zkwtXu+OvFp/Rfg/Dt8mBykS9304mohxT8zLcedhNCmoC4WSg9BmEUMPPZ96gbAS/q1QJJz784W2Wz0sk1GySWwIKOdljwv+r5+aW6/BZ8Kq2QzPX8aCdj9/zzXkFz+hQJjUpTK9Rb5FS6IdRsg4/qDc3BumoIQ4f2K/Q=,iv:M3n5oDdEQtCb/929OUJXD5IAIyjAtIngb1Q5DAqcV9g=,tag:KOpv2Os0ho7mOcq+ad+7rw==,type:str]
pgp: []
encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/infrastructure/configs/kustomization.yaml b/infrastructure/configs/kustomization.yaml
@@ -6,4 +6,4 @@ resources:
- priority-classes.yaml
#- postgres-clusters.yaml
- cnpg-cluster.yaml
- - cnpg-cluster-barmancloud-ext.yaml
+ #- cnpg-cluster-barmancloud-ext.yaml
diff --git a/infrastructure/controllers/cloudnative-pg-operator/operator.yaml b/infrastructure/controllers/cloudnative-pg-operator/operator.yaml
@@ -17,6 +17,12 @@ spec:
timeout: 5m
remediation:
retries: 3
+ crds: Create
+ upgrade:
+ crds: CreateReplace
+ # Force recreation due to Helm not properly patching Deployment with e.g. added port,
+ # causing spurious drift detection
+ force: true
values:
#image:
# repository: ghcr.io/mtrnord/workaround_db_operator
