Story Crater Bot
9d485d1238
CNPG Database CR creates DBs but doesn't grant schema permissions properly. Database owner is 'app' instead of specified role (authentik, temporal). PostSync Job grants ALL on schema public to both app and named roles, ensuring applications can create tables. Runs after Database CRs reconcile. Fixes: authentik InsufficientPrivilege error on migration.
19 lines
465 B
YAML
19 lines
465 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: data-schemas
|
|
|
|
namespace: ddb
|
|
|
|
# GitOps-managed database schemas (ArgoCD wave 6).
|
|
# These depend on ddb-cluster existing (bootstrap wave 0).
|
|
resources:
|
|
- db-permissions-job.yaml
|
|
- authentik-database.yaml
|
|
- temporal-database.yaml
|
|
- temporal-visibility-database.yaml
|
|
- schemas.yaml
|
|
- db-init-job.yaml
|
|
|
|
# db-role-secrets.enc.yaml handled by SOPS secrets Application (wave 4)
|