billisdead
98231d5eaf
When temporal.postgresql.user == postgresql.auth.username, the user already exists with CREATEDB — temporalio/auto-setup handles database creation itself. The init job only runs for a distinct dedicated user. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
76 lines
2.5 KiB
YAML
76 lines
2.5 KiB
YAML
{{- if .Values.temporal.enabled }}
|
|
{{- if .Values.postgresql.enabled }}
|
|
{{- if ne .Values.temporal.postgresql.user .Values.postgresql.auth.username }}
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: {{ include "postiz.fullname" . }}-temporal-init
|
|
labels:
|
|
{{- include "postiz.labels" . | nindent 4 }}
|
|
annotations:
|
|
"helm.sh/hook": post-install,post-upgrade
|
|
"helm.sh/hook-weight": "-5"
|
|
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
|
spec:
|
|
backoffLimit: 6
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: temporal-init
|
|
{{- include "postiz.selectorLabels" . | nindent 8 }}
|
|
spec:
|
|
restartPolicy: OnFailure
|
|
initContainers:
|
|
- name: wait-for-postgres
|
|
image: postgres:16-alpine
|
|
command:
|
|
- sh
|
|
- -c
|
|
- |
|
|
until pg_isready -h $PGHOST -p 5432 -U postgres; do
|
|
echo "Waiting for PostgreSQL..."; sleep 3
|
|
done
|
|
env:
|
|
- name: PGHOST
|
|
value: {{ printf "%s-postgresql" .Release.Name | quote }}
|
|
containers:
|
|
- name: create-temporal-user
|
|
image: postgres:16-alpine
|
|
command:
|
|
- sh
|
|
- -c
|
|
- |
|
|
export PGPASSWORD="$POSTGRES_PASSWORD"
|
|
psql -h "$PGHOST" -U postgres <<-SQL
|
|
DO \$\$ BEGIN
|
|
IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = '$TEMPORAL_USER') THEN
|
|
EXECUTE format(
|
|
'CREATE ROLE %I WITH LOGIN PASSWORD %L CREATEDB',
|
|
'$TEMPORAL_USER',
|
|
'$TEMPORAL_PWD'
|
|
);
|
|
RAISE NOTICE 'Role $TEMPORAL_USER created.';
|
|
ELSE
|
|
RAISE NOTICE 'Role $TEMPORAL_USER already exists, skipping.';
|
|
END IF;
|
|
END \$\$;
|
|
SQL
|
|
env:
|
|
- name: PGHOST
|
|
value: {{ printf "%s-postgresql" .Release.Name | quote }}
|
|
- name: POSTGRES_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ printf "%s-postgresql" .Release.Name | quote }}
|
|
key: postgres-password
|
|
- name: TEMPORAL_USER
|
|
value: {{ .Values.temporal.postgresql.user | quote }}
|
|
- name: TEMPORAL_PWD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ include "postiz.fullname" . }}-temporal-secret
|
|
key: POSTGRES_PWD
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|