Files
homelab/k8s/data/schemas/kustomization.yaml
T
Story Crater Bot 1c98628417 fix(ddb): grant universal schema permissions to all roles
Adds SQL to postInitApplicationSQL granting schema permissions to PUBLIC.
Allows any role (authentik, temporal, etc) to create tables in databases.

For existing cluster: run SQL manually (done).
For future bootstrap: automatic via initdb.

Pattern for apps: Database CR + app-specific init Job optional (co-located).
2026-07-23 08:07:34 -07:00

18 lines
437 B
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
metadata:
name: data-schemas
namespace: ddb
# GitOps-managed database schemas (ArgoCD wave 6).
# These depend on ddb-cluster existing (bootstrap wave 0).
resources:
- authentik-database.yaml
- temporal-database.yaml
- temporal-visibility-database.yaml
- schemas.yaml
- db-init-job.yaml
# db-role-secrets.enc.yaml handled by SOPS secrets Application (wave 4)