fix(soft-serve): migrate to SQLite

PVC is now CephFS anyway so all data's lifecycle is tied to VolSync, Postgres introduces an additional network egress
This commit is contained in:
JJGadgets
2024-08-20 18:05:40 +08:00
parent 16286f8576
commit 074bbbc25b

View File

@@ -21,7 +21,7 @@ spec:
replicas: 1
pod:
labels:
db.home.arpa/pg: "pg-default"
#db.home.arpa/pg: "pg-default"
ingress.home.arpa/world: "allow"
ingress.home.arpa/cluster: "allow"
containers:
@@ -45,8 +45,9 @@ spec:
SOFT_SERVE_STATS_LISTEN_ADDR: ":23233"
SOFT_SERVE_LFS_ENABLED: "true"
SOFT_SERVE_LFS_SSH_ENABLED: "true"
SOFT_SERVE_DB_DRIVER: "postgres"
SOFT_SERVE_DB_DATA_SOURCE: {valueFrom: {secretKeyRef: {name: pg-default-pguser-softserve, key: pgbouncer-uri}}}
SOFT_SERVE_DB_DRIVER: "sqlite"
#SOFT_SERVE_DB_DRIVER: "postgres"
#SOFT_SERVE_DB_DATA_SOURCE: {valueFrom: {secretKeyRef: {name: pg-default-pguser-softserve, key: pgbouncer-uri}}}
SOFT_SERVE_INITIAL_ADMIN_KEYS: {valueFrom: {secretKeyRef: {name: soft-serve-secrets, key: admin-keys}}}
securityContext: &sc
readOnlyRootFilesystem: true
@@ -114,7 +115,7 @@ spec:
enableServiceLinks: false
securityContext:
runAsNonRoot: true
runAsUser: &uid ${APP_UID_SOFT_SERVE}
runAsUser: &uid ${APP_UID_SOFT_SERVE:=1000}
runAsGroup: *uid
fsGroup: *uid
fsGroupChangePolicy: "Always"