Files
Kubernetes-Manifests/applications/gitea/postgres/gitea-postgres-statefulset.yaml
T
Jeffrey 0177c73fa9 gitea: migrate to envFrom with per-container InfisicalSecrets
Flat CR narrowed to recursive: false; it still serves the SMB mount credentials and the Actions runner token, which the runner Helm chart reads via existingSecret.
2026-08-24 00:20:29 +02:00

40 lines
999 B
YAML

apiVersion: apps/v1
kind: StatefulSet
metadata:
namespace: gitea
name: gitea-postgresql
spec:
replicas: 1
selector:
matchLabels:
app: gitea-postgresql
serviceName: gitea-postgresql
template:
metadata:
labels:
app: gitea-postgresql
spec:
restartPolicy: Always
terminationGracePeriodSeconds: 60
containers:
- name: gitea-postgresql
image: postgres:18
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
ports:
- containerPort: 5432
volumeMounts:
- name: gitea-postgresql-database
mountPath: /var/lib/postgresql/volumes/pgdata
envFrom:
- secretRef:
name: gitea-postgres-secrets
volumes:
- name: gitea-postgresql-database
persistentVolumeClaim:
claimName: gitea-postgresql-pvc