Files
domain-incoming/share/authentik/postgresql.tf
2023-08-12 11:53:33 +02:00

87 lines
2.2 KiB
HCL

locals {
pg-labels = merge(local.common-labels, {
"app.kubernetes.io/component" = "pg"
})
pool-labels = merge(local.common-labels, {
"app.kubernetes.io/component" = "pg-pool"
})
backup-def = var.backups.enable ? {
retentionPolicy = var.backups.retention.db
barmanObjectStore = {
destinationPath = "s3://${var.instance}-${var.namespace}/"
endpointURL = "${var.backups.endpoint}/barman"
s3Credentials = {
accessKeyId = {
name = var.backups.secret-name
key = var.backups.key-id-key
}
secretAccessKey = {
name = var.backups.secret-name
key = var.backups.secret-key
}
}
}
} : {}
}
resource "kubectl_manifest" "prj_pg" {
yaml_body = <<-EOF
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: "${var.instance}-${var.component}-pg"
namespace: "${var.namespace}"
labels: ${jsonencode(local.pg-labels)}
spec:
instances: ${var.postgres.replicas}
storage:
size: "${var.postgres.storage}"
monitoring:
enablePodMonitor: true
bootstrap:
initdb:
database: "${var.component}"
owner: "${var.component}"
backup: ${jsonencode(local.backup-def)}
EOF
}
resource "kubectl_manifest" "prj_pg_backup" {
yaml_body = <<-EOF
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
metadata:
name: "${var.instance}-${var.component}-pg"
namespace: "${var.namespace}"
labels: ${jsonencode(local.pg-labels)}
spec:
schedule: "${var.backups.schedule.db}"
backupOwnerReference: self
cluster:
name: "${var.instance}-${var.component}-pg"
EOF
}
resource "kubectl_manifest" "prj_pg_pool" {
depends_on = [kubectl_manifest.prj_pg]
yaml_body = <<-EOF
apiVersion: postgresql.cnpg.io/v1
kind: Pooler
metadata:
name: "${var.instance}-${var.component}-pool"
namespace: "${var.namespace}"
labels: ${jsonencode(local.pool-labels)}
spec:
cluster:
name: "${var.instance}-${var.component}-pg"
instances: 1
type: rw
pgbouncer:
poolMode: session
parameters:
max_client_conn: "1000"
default_pool_size: "10"
EOF
}