Files
toallab-automation/roles/cloudnativepg_operator/defaults/main.yml

51 lines
2.1 KiB
YAML

---
# --- OLM subscription ---
# CloudNativePG is in the certified-operators catalog by default (no custom
# CatalogSource needed, unlike automation_orchestrator_operator).
cloudnativepg_operator_operator_namespace: cloudnative-pg
cloudnativepg_operator_channel: stable-v1
cloudnativepg_operator_name: cloudnative-pg
cloudnativepg_operator_catalog_source: certified-operators
cloudnativepg_operator_wait_timeout: 600
# --- Cluster CR ---
# Namespace for the Cluster, credential Secrets, and Database CRs. Defaults to
# the automation_orchestrator_operator app namespace — keep the two in sync if overridden.
cloudnativepg_operator_cluster_namespace: automation-orchestrator
cloudnativepg_operator_cluster_name: orchestrator-postgres
cloudnativepg_operator_owner_user: orchestrator
cloudnativepg_operator_instances: 1
cloudnativepg_operator_image_name: ghcr.io/cloudnative-pg/postgresql:15
cloudnativepg_operator_storage_size: 5Gi
cloudnativepg_operator_storage_class: ""
cloudnativepg_operator_max_connections: 200
# --- Databases (Database CRs, all owned by cloudnativepg_operator_owner_user) ---
cloudnativepg_operator_databases:
- name: orchestrator
dbname: orchestrator
- name: temporal
dbname: temporal
- name: temporal-visibility
dbname: temporal_visibility
# --- Credential secrets (type kubernetes.io/basic-auth) ---
# All share the same generated username/password; only the referenced database differs.
# secrets[0] is used as the CNPG bootstrap.initdb secret (creates the owner role + first DB).
cloudnativepg_operator_secrets:
- name: orchestrator-postgres-secret
database: orchestrator
- name: temporal-postgres-secret
database: temporal
- name: temporal-visibility-postgres-secret
database: temporal_visibility
# --- Vault ---
# KV2 path/key where the generated postgres password is stored and retrieved.
cloudnativepg_operator_vault_mount: kv
cloudnativepg_operator_vault_path: cloudnativepg/orchestrator-postgres
# --- Debugging ---
# Set to false to disable no_log and expose secret values in task output.
cloudnativepg_operator_no_log: true