7fbba919c5
Requests only, limits unchanged; no apply. ESO values file for the Helm release (+ draft Application mirror), openbao-ui-gateway CPU 25m->10m, forgejo-db 105m/288Mi. Playwright change lives in rapp-playwright 1557742. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 276069@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
70 lines
2 KiB
YAML
70 lines
2 KiB
YAML
---
|
||
# CNPG cluster for Forgejo (railiance01 production forge).
|
||
# Managed by railiance-platform (S3). Operator: cnpg-system.
|
||
#
|
||
# Apply: KUBECONFIG=~/.kube/config-hosteurope make forgejo-db-deploy
|
||
# Status: make forgejo-db-status
|
||
# Primary: Scaleway Barman + WAL. Secondary: make forgejo-backup (Nextcloud + age).
|
||
#
|
||
# Pre-condition: forgejo-db-credentials Secret in databases namespace.
|
||
# See helm/forgejo-db-secret.sops.yaml.template
|
||
apiVersion: postgresql.cnpg.io/v1
|
||
kind: Cluster
|
||
metadata:
|
||
name: forgejo-db
|
||
namespace: databases
|
||
labels:
|
||
app.kubernetes.io/name: forgejo-db
|
||
app.kubernetes.io/component: database
|
||
app.kubernetes.io/managed-by: manual
|
||
railiance.io/layer: s3-platform
|
||
railiance.io/consumer: forgejo
|
||
spec:
|
||
instances: 1
|
||
imageName: ghcr.io/cloudnative-pg/postgresql:16
|
||
# Burstable QoS + headroom for pg_dump / forgejo-backup (was BestEffort → probe
|
||
# timeouts on :8000 under node CPU pressure). Sized like net-kingdom-pg on ~4Gi node.
|
||
resources:
|
||
requests:
|
||
cpu: 105m
|
||
memory: 288Mi
|
||
limits:
|
||
cpu: "1"
|
||
memory: 1Gi
|
||
# Default liveness window is 30s (3×10s); extend so backup I/O stalls do not restart the pod.
|
||
livenessProbeTimeout: 90
|
||
probes:
|
||
liveness:
|
||
timeoutSeconds: 10
|
||
periodSeconds: 15
|
||
failureThreshold: 6
|
||
readiness:
|
||
timeoutSeconds: 10
|
||
periodSeconds: 15
|
||
failureThreshold: 6
|
||
storage:
|
||
size: 10Gi
|
||
bootstrap:
|
||
initdb:
|
||
database: forgejo
|
||
owner: forgejo
|
||
secret:
|
||
name: forgejo-db-credentials
|
||
backup:
|
||
retentionPolicy: 30d
|
||
barmanObjectStore:
|
||
destinationPath: s3://railiance-platform-pg-backup/platform-pg/forgejo-db/
|
||
endpointURL: https://s3.nl-ams.scw.cloud
|
||
s3Credentials:
|
||
accessKeyId:
|
||
name: platform-pg-backup-s3
|
||
key: ACCESS_KEY_ID
|
||
secretAccessKey:
|
||
name: platform-pg-backup-s3
|
||
key: ACCESS_SECRET_KEY
|
||
wal:
|
||
compression: gzip
|
||
maxParallel: 2
|
||
data:
|
||
compression: gzip
|
||
jobs: 2
|