forust
003b1e5dca
Move the shared postgres service from 15.19 to 17.6 as the postgres17 StatefulSet with its own PVC, extend the initdb and ingress policy with the statuspage database, and drop the now-unused per-app postgres manifests for authentik, gitea and netronome.
32 lines
828 B
YAML
32 lines
828 B
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: postgres-ingress
|
|
namespace: database
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: postgres17
|
|
policyTypes:
|
|
- Ingress
|
|
ingress:
|
|
- from:
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: authentik
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: gitea
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: netronome
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: penpot
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: statuspage
|
|
ports:
|
|
- protocol: TCP
|
|
port: 5432
|