Adds SQL to postInitApplicationSQL granting schema permissions to PUBLIC. Allows any role (authentik, temporal, etc) to create tables in databases. For existing cluster: run SQL manually (done). For future bootstrap: automatic via initdb. Pattern for apps: Database CR + app-specific init Job optional (co-located).
18 lines
437 B
YAML
18 lines
437 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: data-schemas
|
|
|
|
namespace: ddb
|
|
|
|
# GitOps-managed database schemas (ArgoCD wave 6).
|
|
# These depend on ddb-cluster existing (bootstrap wave 0).
|
|
resources:
|
|
- authentik-database.yaml
|
|
- temporal-database.yaml
|
|
- temporal-visibility-database.yaml
|
|
- schemas.yaml
|
|
- db-init-job.yaml
|
|
|
|
# db-role-secrets.enc.yaml handled by SOPS secrets Application (wave 4)
|