mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 11:03:59 +00:00
c3fae73de3
Three Junie briefs landed in one commit: #07 — Wire cnpg-backup-sa into CNPG cluster spec (drift R8) deploy/gcp/gke/knoe-db.yaml: add spec.serviceAccountName: cnpg-backup-sa (requires CNPG v1.29+, which is the live operator version). etc/init_cnpg_gke.sh: operator install URL now uses CNPG_OPERATOR_VERSION variable (default 1.29.0); new §11 patches knoe-db and knoe-db-barman-cloud RoleBindings to add cnpg-backup-sa as a subject if not already present — matching the 2026-04-29 live stabilization. #13 — Migrate off deprecated enablePodMonitor + podMonitorRelabelings Both deprecated fields removed from deploy/gcp/gke/knoe-db.yaml spec.monitoring. New deploy/gcp/gke/knoe-db-podmonitor.yaml carries the PodMonitor with the cluster relabeling rule (cnpg.io/cluster pod label → cluster label; required for all 85 CNPG Grafana panels). Apply alongside knoe-db.yaml on next cluster patch. #15 — Remove dead DASHBOARD consumer + basicauth_credentials supabase/helm/knoe-supabase: - wrapper.sh: drop DASHBOARD_USERNAME / DASHBOARD_PASSWORD envsubst lines - config.yaml: drop DASHBOARD consumer + basicauth_credentials block - kong/deployment.yaml: drop both DASHBOARD env-var secret refs - values.yaml: rename secret.dashboard → secret.openai (apiKey only; username/password dropped — no enforcer since commit 25f1b2e) - secrets/dashboard.yaml + _helpers.tpl: renamed to openai / supabase.secret.openai - studio/deployment.yaml: reads from secret.openai.apiKey - ci/example.yaml: updated to secret.openai.apiKey helm template confirms knoe-supabase-openai secret referenced; no DASHBOARD output. docs/TODO.md: queue items #7, #13, #15 + drift row R8 archived to Done. Co-authored-by: Junie <junie@jetbrains.com>
70 lines
1.5 KiB
Smarty
70 lines
1.5 KiB
Smarty
{{/*
|
|
Expand the name of the JWT secret.
|
|
*/}}
|
|
{{- define "supabase.secret.jwt" -}}
|
|
{{- printf "%s-jwt" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the SMTP secret.
|
|
*/}}
|
|
{{- define "supabase.secret.smtp" -}}
|
|
{{- printf "%s-smtp" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the openai secret.
|
|
*/}}
|
|
{{- define "supabase.secret.openai" -}}
|
|
{{- printf "%s-openai" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the database secret.
|
|
*/}}
|
|
{{- define "supabase.secret.db" -}}
|
|
{{- printf "%s-db" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the analytics secret.
|
|
*/}}
|
|
{{- define "supabase.secret.analytics" -}}
|
|
{{- printf "%s-analytics" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the meta secret.
|
|
*/}}
|
|
{{- define "supabase.secret.meta" -}}
|
|
{{- printf "%s-meta" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the realtime secret.
|
|
*/}}
|
|
{{- define "supabase.secret.realtime" -}}
|
|
{{- printf "%s-realtime" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the s3 secret.
|
|
*/}}
|
|
{{- define "supabase.secret.s3" -}}
|
|
{{- printf "%s-s3" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the minio secret.
|
|
*/}}
|
|
{{- define "supabase.secret.minio" -}}
|
|
{{- printf "%s-minio" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Expand the name of the oauth2proxy secret.
|
|
*/}}
|
|
{{- define "supabase.secret.oauth2proxy" -}}
|
|
{{- printf "%s-oauth2proxy" (include "supabase.fullname" .) }}
|
|
{{- end -}}
|