Add helm chart for postgresql database

.github/workflows/charts.yml

@@ -27,6 +27,7 @@ jobs:
           helm repo add keda https://kedacore.github.io/charts
           helm repo add opa https://open-policy-agent.github.io/kube-mgmt/charts
           helm repo add prometheus https://prometheus-community.github.io/helm-charts
+          helm repo add bitnami https://charts.bitnami.com/bitnami
 
       - name: Lint
         run: >

charts/xchemlab/Chart.lock

@@ -29,6 +29,9 @@ dependencies:
 - name: prometheus
   repository: https://prometheus-community.github.io/helm-charts
   version: 25.0.0
+- name: postgresql-ha
+  repository: https://charts.bitnami.com/bitnami
+  version: 11.5.1
 - name: thanos
   repository: oci://docker.io/bitnamicharts
   version: 12.11.0
@@ -41,5 +44,5 @@ dependencies:
 - name: oauth2-proxy
   repository: oci://registry-1.docker.io/bitnamicharts
   version: 3.7.4
-digest: sha256:2738fe6bf788e283ebdd64f5bbf8c0094b9e7271b40fe693b661117d4bed9eb9
-generated: "2024-03-06T11:37:40.525320982Z"
+digest: sha256:a634cb025d1c7c8a262ad068b91942e57b3d01fb93c360c280325025c7847a1f
+generated: "2024-03-07T11:33:00.477078341Z"

charts/xchemlab/Chart.yaml

@@ -6,7 +6,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.9.0
+version: 0.10.0
 
 dependencies:
   - name: chimp-chomp
@@ -43,6 +43,10 @@ dependencies:
     repository: https://prometheus-community.github.io/helm-charts
     version: 25.0.0
     condition: prometheus.enabled
+  - name: postgresql-ha
+    repository: https://charts.bitnami.com/bitnami
+    version: 11.5.1
+    condition: postgresql-ha.enabled
   - name: thanos
     repository: oci://docker.io/bitnamicharts
     version: 12.11.0

charts/xchemlab/templates/application-secret-sealed.yaml

@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: application-passwords
+  namespace: xchemlab
+spec:
+  encryptedData:
+    passwords: AgBN+kpZJA0xyJaFpHAN3227os+MZk+idXvqI6Jfo5dtUtjkEjquG0iSxCTPm1R1OTukD9Z+ctK8MsL6nOHviVuMLVXRsfkp4qKYRxoUbUR+QJ1wKKOUAIbgsPWIaEYHkCBCQapbhG237rT4WaK7str2luc0W5gZsW4A0oh8B0pNKCQg6TSeYo/f++KskG9vJwGunHxPgLT4yRtJ41WR5ICmB+6qmOxnqCmpSomnmkceuzdtVP+d2aJxA0tl1D2d1slN4XLuhwzUBd8Y2N4+WaLOItzZ5G0SNCLC2+u1xk8Yu+vKFqR4Sqo4QDp6s9EY+cfWmuPJ7EDn3wecsoQjk8oshSevf5PTSpSuvCiHjNCsGrqzCgxNKT8ntrXermJ/NqU8r4RDBs5jtK/8ZBvI7tJJHr9hhb9duUY/ErgjWzX2JZwl6OE9igpkcYEbrk3FI24E4CtNJgPbFxGREvhKiL4HDg3qff6kUEDtZaOQdeWU/KU/DNr8i2eeNN0U8WOrurHjghu2IaRs6VPRPPGm9D4veEamVhCmE8UhyYNNzepdqtxBjYFu1CF4dvWzU0MCpo93sV3XVmfvKlV8AheKBrrIbDssxfC4Io7suy/37KfzJdXZ1P2yOULsG7bGWgLiGpYljHCVueKWfBYxnTyOmiw6hgYUWMR9xjF9KV3rlyCB8hF84v73rcLvec38Pzb8rEU=
+    usernames: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: application-passwords
+      namespace: xchemlab

charts/xchemlab/templates/init-script.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+data:
+  init.sql: |-
+    CREATE DATABASE compound_library
+    CREATE DATABASE compound_soaking
+    CREATE DATABASE crystal_library
+    CREATE DATABASE targeting
+    CREATE DATABASE pin_packing
+kind: ConfigMap
+metadata:
+  creationTimestamp: "2024-03-06T14:09:35Z"
+  name: init-script
+  namespace: xchemlab
+  resourceVersion: "900365901"
+  uid: 1d0edc7d-f2f6-49d5-9c97-f8052e600104

charts/xchemlab/templates/pgpool-secret-sealed.yaml

@@ -0,0 +1,14 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: pgpool-passwords
+  namespace: xchemlab
+spec:
+  encryptedData:
+    admin-password: AgBUOBAKTxapTulnpYTf9D+i8sZg+eZjZNyl+wkQaa2julJq3cX9DR+5l6eq1uzSmc3LLwHJcbeBTMe/jNjFAkrQ/zmZ91Domi9S/Lx9h2hCRyVwrxKyrBg3unx4jRgyZeKTda89wAaMARB9tp9vbCSKXSX3PwLOohSilvhrw4f4vblmkfq2O3KxtFkc3J8kS/OjPQtLNHji8a+S624jLx7kxtLxsZDJ452nAHnXIxyBcap6PMZXn1huTCbH6LVXDBgl97uTaEutsuzqeUQtDUuOGQ7K/zG9MUNN+IhnXmg+VU8762SBI7pMIdBGqM7CDIxm+tY/sNpXolL0S5D0ZbKnSwCasJoCE/4X1LFkDcSgnlBF06q689I+1KsmxJytYZ2Dz3Y6E9oiW1Ta1lxeyKigPEDqpvxPCTzc3UwjwNRQsQgD7kVEnACx98pmvw8MvfUaAdM70FIsZqZiKe6F3MC/ziqIcKATgTa6rezc8YEOzUHBbrM5r49A3refZNZ1o/9w4VXeLL3W70VJq5vT95l939XzvKCDflv1ik1I18Bm/QubQUgWX5ZTeTfOKau36qLR7eGWm1HqEplFLDEdMq99+AtLd148JV0ptK34sC50krvKb2CU5JAM+GPOBJJt1yfL/hNDuwxfYu//zc0B1s4qsxucwFgd5wc7idR/FzlGSz3RxYPBr6Ap6JILMr9FmCowarUozSvE+6LOxUkB0POPD7BpSGI2SMc=
+  template:
+    metadata:
+      creationTimestamp: null
+      name: pgpool-passwords
+      namespace: xchemlab

charts/xchemlab/templates/postgres-secret-sealed.yaml

@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: postgres-passwords
+  namespace: xchemlab
+spec:
+  encryptedData:
+    password: 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
+    repmgr-password: AgA6gmXEIcvAKjBNVCEO9DhatKSWeC0MvMGNLF263gxErJ+rt1m9RA0jBTSQWx7Q+naMhYKDEPL/EjpxkYAhTyBTIQ+uCCTYYdfCRjwSRE3ZJiDbx2JLnYdg8i70/l30aaDu85sr8ouD9uYNlJ52rtjiapAJ+YRnTCpz+yy5zwjqzV8KOc/Tbst77KF6SSwfX74VzecHdOJoT3jjhiZ34qB2I+IdfrJVlW1EC72C9JLi1O+tVsIyrVs+6ernug1tH9cF+ef3v5axDVKlLtsDKtkK/vzALKu1iBNQ6fxYP4qCqhiH4vQhXFRRUD0N6U70TFoGIDpT0nHass4hs9PawGrAajzMNLcFtNOXZmEdCK1xhgCiT1P06P7Mn1MuPlkbOg9RfFOTtWMb60e0Ew26rIIQiDxQK5ZRxE0CYtT5c1sNUpz4RNOYC2uWI+i3zLHfLImymqIyKcj+9SebruhOOvcsg6soAY9Lat8t+Gufed5ZlZp8K1e5O+tk6ggAXj70kGfjRcdepc8ixGugBEKoMFDEwgbSADgMexuP6gOim/TFqwGebQxP+PwbRPlMGdjU1mNBNBBG0Je9+oPNd7OYTvzYcBV3wuqVROPOqdBnOS+cq4EJuI7c2oj82CKlJ8YQwfIa5/GOVphx1wam562CHbu60yrQHe5ZKjiunntqf7PJIHx+ZI0Kb2bxf3Oe2GKpUoOR+acVfD3k4eE1eSWGdFx3tKAHS9Mu+NE=
+  template:
+    metadata:
+      creationTimestamp: null
+      name: postgres-passwords
+      namespace: xchemlab

charts/xchemlab/values.yaml

@@ -156,6 +156,34 @@ opa-kube-mgmt:
   rbac:
     create: false
 
+postgresql-ha:
+  postgresql:
+    existingSecret: postgres-passwords
+    podAntiAffinityPreset: hard
+    resources:
+      requests:
+        cpu: 500m
+        memory: 512Mi
+      limits:
+        cpu: 2
+        memory: 2Gi
+    initdbScripts: init-script
+
+  pgpool:
+    existingSecret: pgpool-passwords
+    customUsersSecret: application-passwords
+    resources:
+      requests:
+        cpu: 500m
+        memory: 256Mi
+      limits:
+        cpu: 1
+        memory: 512Mi
+
+  persistence:
+    storageClass: db-nvme-storage
+    size: 50Gi
+
 prometheus:
   enabled: true