chore(backstage): Added database and secrets for backstage

This commit is contained in:
Daniël Groothuis
2025-10-28 21:34:13 +01:00
parent f6e4f44984
commit 8603742901
7 changed files with 114 additions and 0 deletions

View File

@@ -0,0 +1,23 @@
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: backstage-postgres
namespace: backstage
spec:
imageName: ghcr.io/tensorchord/cloudnative-pgvecto.rs:16.5-v0.3.0@sha256:be3f025d79aa1b747817f478e07e71be43236e14d00d8a9eb3914146245035ba
instances: 1
managed:
roles:
- name: backstage
superuser: true
login: true
bootstrap:
initdb:
database: backstage
owner: backstage
secret:
name: backstage-postgres-user
storage:
size: 2Gi
storageClass: local-path

View File

@@ -0,0 +1,9 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
metadata:
name: backstage
resources:
- secret.yaml
- db-cluster.yaml

View File

@@ -0,0 +1,33 @@
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: backstage
spec:
refreshInterval: 1h
secretStoreRef:
name: platform
kind: ClusterSecretStore
target:
name: backstage-postgres-user
data:
- secretKey: DB_USERNAME
remoteRef:
key: backstage/db
property: DB_USERNAME
- secretKey: DB_DATABASE_NAME
remoteRef:
key: backstage/db
property: DB_DATABASE_NAME
- secretKey: DB_PASSWORD
remoteRef:
key: backstage/db
property: DB_PASSWORD
- secretKey: username
remoteRef:
key: backstage/db
property: username
- secretKey: password
remoteRef:
key: backstage/db
property: password