From 5d24466dca1c6623a5f5bc99abfa89661f71e7f7 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Mon, 24 Apr 2023 18:41:47 +0200
Subject: [PATCH] fix(hedgedoc): Add missing TLS section to postgresql database
---
apps/base/hedgedoc/database.yaml | 22 ++++++++++++++++++++++
1 file changed, 22 insertions(+)
diff --git a/apps/base/hedgedoc/database.yaml b/apps/base/hedgedoc/database.yaml
index c424fdec0..48d34c478 100644
--- a/apps/base/hedgedoc/database.yaml
+++ b/apps/base/hedgedoc/database.yaml
@@ -16,3 +16,25 @@ spec:
hedgedoc: hedgedoc
postgresql:
version: "14"
+ spiloFSGroup: 103
+ tls:
+ secretName: "hedgedoc-postgres-tls"
+ caSecretName: "namespace-ca"
+ caFile: "ca.crt"
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+ name: hedgedoc-postgres
+ namespace: hedgedoc
+spec:
+ secretName: hedgedoc-postgres-tls
+ dnsNames:
+ - hedgedoc-postgres.hedgedoc.svc.cluster.local
+ - hedgedoc-postgres.hedgedoc.svc
+ issuerRef:
+ name: namespace-ca-issuer
+ kind: Issuer
+ group: cert-manager.io
+ usages:
+ - server auth
--
GitLab