coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(s3): add cnpg Gitea database cluster + Makefile targets

Browse source 
- helm/gitea-db-cluster.yaml: cnpg Cluster for Gitea (1 instance, 10Gi, pg16)
  bootstraps gitea DB from gitea-db-credentials secret in databases namespace
- helm/gitea-db-secret.sops.yaml.template: credential secret template (encrypt before use)
- Makefile: add db-deploy, db-status, db-shell, db-logs targets; mark pg-deploy legacy
- .gitignore: allow *-cluster.yaml (k8s manifests with no secrets)

Cluster applied to live cluster. RAIL-HO-WP-0004-T03.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-03-27 02:07:31 +01:00
parent f33648e126
commit 2a4312643d
4 changed files with 77 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

14
helm/gitea-db-secret.sops.yaml.template Normal file
View file

@ -0,0 +1,14 @@
# Template for the gitea-db-credentials Secret.
# DO NOT commit this file with real credentials.
# Encrypt with: sops -e -i helm/gitea-db-secret.sops.yaml
# Apply with: kubectl apply -f <(sops -d helm/gitea-db-secret.sops.yaml)
---
apiVersion: v1
kind: Secret
metadata:
name: gitea-db-credentials
namespace: databases
type: kubernetes.io/basic-auth
stringData:
username: gitea
password: REPLACE_WITH_PASSWORD # encrypt with SOPS before committing