up

Author: mitchross

infrastructure/database/crunchy-postgres/immich/cluster.yaml

@@ -64,9 +64,7 @@ spec:
     databases: [ "immich" ]
     options: "CREATEDB CREATEROLE"
     password:
-      secretKeyRef:
-        name: immich-db-password
-        key: password
+      type: AlphaNumeric
   proxy:
     pgBouncer:
       port: 5432

my-apps/media/immich/deployment-server.yaml

@@ -51,7 +51,7 @@ spec:
         - name: DB_URL
           valueFrom:
             secretKeyRef:
-              name: immich-db-password
+              name: immich-pguser-immich
               key: uri
         - name: REDIS_HOSTNAME
           value: "immich-valkey.immich.svc.cluster.local"

my-apps/media/immich/externalsecret.yaml

@@ -9,11 +9,20 @@ spec:
     kind: ClusterSecretStore
     name: 1password
   target:
-    name: immich-db-password
+    name: immich-pguser-immich
     creationPolicy: Owner
     template:
+      metadata:
+        labels:
+          postgres-operator.crunchydata.com/cluster: immich
+          postgres-operator.crunchydata.com/pguser: immich
+          postgres-operator.crunchydata.com/role: pguser
       data:
+        user: "{{ .immich_db_username }}"
         password: "{{ .immich_db_password }}"
+        dbname: "immich"
+        host: "immich-pgbouncer.immich.svc.cluster.local"
+        port: "5432"
         uri: "postgresql://{{ .immich_db_username }}:{{ .immich_db_password }}@immich-pgbouncer.immich.svc.cluster.local:5432/immich?sslmode=require"
   dataFrom:
   - extract: