Postgres Secrets and ConfigMap Values
Secrets
| Custom Name | Default Name | Type | Description | Used in Components |
|---|---|---|---|---|
<global.postgresCustomSecretName> | <release_name>-postgres-secret | Required | Basic authentication secret which contains username and password for Database. If postgres.createUserSecret is set to true, it will be created automatically from username and password. Otherwise, secret has to already exist. | Worker, SDM |
Values
Secret Configuration
| Key | Type | Default | Description |
|---|---|---|---|
| createUserSecret | bool | true | A user secret will be created automatically with the given username and password; otherwise, the secret must already exist. |
| customSecretName | string | nil | Postgres custom secret name. If umbrella chart is used for deployment, this value is ignored, and the value from global.postgresCustomSecretName will be used as a secret name. |
| password | string | "tiscale_11223" | Password. |
| username | string | "tiscale" | Username. Required if host is not set, because the Detect PostgreSQL cluster will be created and this user will be set as the database owner. |
Kubernetes Settings
| Key | Type | Default | Description |
|---|---|---|---|
| affinity | object | {} | Affinity for pod scheduling. Allows to constrain which nodes your pod can be scheduled on based on node labels or ensure pods are co-located (or isolated) from other pods. |
Application Configuration
| Key | Type | Default | Description |
|---|---|---|---|
| database | string | "tiscale" | Database name. |
| host | string | "" | Host for external PostgreSQL. When configured, the Detect PostgreSQL cluster won't be created. |
| port | int | 5432 | PostgreSQL port. |
| schema | string | "" | Schema name which will be used for SDM. When empty, default name "portal" will be used. |
Pod Settings
| Key | Type | Default | Description |
|---|---|---|---|
| image | object | - | Configuration values of the postgres image. |
| image.repository | string | "ghcr.io/cloudnative-pg/postgresql" | Image repository. |
| image.tag | string | "17.6" | Image tag. |
| persistence | object | - | Postgres data storage configuration. |
| persistence.accessModes | list | ["ReadWriteOnce"] | Specifies the access modes for the volume. |
| persistence.requestStorage | string | "5Gi" | The amount of storage to request. |
| persistence.storageClassName | string | nil | Name of the StorageClass to use. |
| replicas | int | 1 | Number of desired pod instances. |
| resources | object | - | Resource requests and limits for the container. |
| resources.limits | object | - | The maximum amount of resources the container is allowed to consume. |
| resources.limits.cpu | string | nil | CPU limit. Throttling occurs if the container exceeds this value. |
| resources.limits.memory | string | nil | Memory limit. If exceeded, the container may be terminated with an OOMKilled error. |
| resources.requests | object | - | The minimum amount of resources the container is guaranteed. |
| resources.requests.cpu | string | "500m" | CPU request. |
| resources.requests.memory | string | "1Gi" | Memory request. |