feat(secrets): add sealed secret for PostgreSQL credentials

htwg-1/flux-apps/postgres-tunnel.yaml

@@ -1,32 +1,15 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
+apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: HelmRelease
+kind: Kustomization
 metadata:
   name: postgres
-  namespace: postgres
+  namespace: flux-system
 spec:
-  interval: 1h
+  interval: 10m
-  chart:
+  retryInterval: 2m
-    spec:
+  sourceRef:
-      chart: postgresql
+    kind: GitRepository
-      version: "16.x"
+    name: gitops
-      sourceRef:
+    namespace: flux-system
-        kind: HelmRepository
+  path: ./postgres/htwg-1
-        name: bitnami
+  prune: true
-        namespace: flux-system
+  timeout: 3m
-  values:
-    auth:
-      database: nowchess
-      existingSecret: postgres-credentials
-      secretKeys:
-        adminPasswordKey: postgres-password
-    primary:
-      persistence:
-        enabled: true
-        size: 5Gi
-      resources:
-        requests:
-          cpu: 100m
-          memory: 256Mi
-        limits:
-          cpu: 500m
-          memory: 512Mi

postgres/htwg-1/service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres
+  namespace: postgres
+spec:
+  selector:
+    app: postgres
+  ports:
+    - port: 5432
+      targetPort: 5432

postgres/htwg-1/statefulset.yaml

@@ -0,0 +1,47 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: postgres
+  namespace: postgres
+spec:
+  selector:
+    matchLabels:
+      app: postgres
+  serviceName: postgres
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: postgres
+    spec:
+      containers:
+        - name: postgres
+          image: postgres:17-alpine
+          env:
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-credentials
+                  key: postgres-password
+            - name: PGDATA
+              value: /var/lib/postgresql/data/pgdata
+          ports:
+            - containerPort: 5432
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 500m
+              memory: 512Mi
+          volumeMounts:
+            - name: data
+              mountPath: /var/lib/postgresql/data
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        accessModes: [ReadWriteOnce]
+        resources:
+          requests:
+            storage: 5Gi

secrets/htwg-1/ghcr-pull-secret.yaml

@@ -9,7 +9,7 @@ metadata:
   namespace: nowchess
 spec:
   encryptedData:
-    .dockerconfigjson: REPLACE_WITH_SEALED_VALUE
+    .dockerconfigjson: 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
   template:
     type: kubernetes.io/dockerconfigjson
     metadata:

secrets/htwg-1/ncs-internal-secret.yaml

@@ -1,13 +1,13 @@
-# PLACEHOLDER — seal with htwg-1 cluster key before use
+---
 apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
 metadata:
   name: ncs-internal-secret
-  namespace: nowchess
+  namespace: postgres
 spec:
   encryptedData:
-    REPLACE_KEY: REPLACE_WITH_SEALED_VALUE
+    INTERNAL_SECRET: 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
   template:
     metadata:
       name: ncs-internal-secret
-      namespace: nowchess
+      namespace: postgres

secrets/htwg-1/ncs-jwt-keys.yaml

@@ -1,4 +1,4 @@
-# PLACEHOLDER — seal with htwg-1 cluster key before use
+---
 apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
 metadata:
@@ -6,8 +6,10 @@ metadata:
   namespace: nowchess
 spec:
   encryptedData:
-    REPLACE_KEY: REPLACE_WITH_SEALED_VALUE
+    private.pem: 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
+    public.pem: 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
   template:
     metadata:
       name: ncs-jwt-keys
       namespace: nowchess
+    type: Opaque

secrets/htwg-1/remotek6-certs.yaml

@@ -1,4 +1,4 @@
-# PLACEHOLDER — seal with htwg-1 cluster key before use
+---
 apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
 metadata:
@@ -6,8 +6,11 @@ metadata:
   namespace: nowchess
 spec:
   encryptedData:
-    REPLACE_KEY: REPLACE_WITH_SEALED_VALUE
+    ca.crt: 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
+    client.crt: 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
+    client.key: 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
   template:
     metadata:
       name: remotek6-certs
       namespace: nowchess
+    type: Opaque