feat: add cloudnative-pg

.github/renovate.json

@@ -46,7 +46,10 @@
       "datasourceTemplate": "helm"
     },
     {
-      "fileMatch": ["crds\\/metallb\\/crds\\.yaml$"],
+      "fileMatch": [
+        "crds\\/metallb\\/crds\\.yaml$",
+        "crds\\/cloudnative-pg\\/crds\\.yaml$"
+      ],
       "matchStrings": [
         "datasource=(?<datasource>.*) depName=(?<depName>.*)\\s.*tag: (?<currentValue>.*)"
       ]

base/README.md

@@ -5,6 +5,7 @@ This directory contains applications that are useful for cluster operations.
 ## Contents
 
 - **cloudflare-operator** Kubernetes operator for managing Cloudflare DNS records
+- **cloudnative-pg** Kubernetes operator for managing PostgreSQL databases
 - **intel-gpu-plugin** Intel device plugin for Kubernetes
 - **k8up** is a Kubernetes backup operator created by VSHN
 - **minio** s3 compatible object storage

base/cloudnative-pg/helmrelease.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cloudnative-pg
+  namespace: cnpg-system
+spec:
+  interval: 5m
+  driftDetection:
+    mode: enabled
+  chart:
+    spec:
+      chart: cloudnative-pg
+      version: 0.21.4
+      sourceRef:
+        kind: HelmRepository
+        name: cloudnative-pg
+        namespace: flux-system
+      interval: 5m
+  values:
+    crds:
+      create: false
+  install:
+    crds: Skip
+  upgrade:
+    crds: Skip

base/cloudnative-pg/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrelease.yaml

base/kustomization.yaml

@@ -2,6 +2,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - cloudnative-pg
   - cloudflare-operator
   - minio
   - intel-gpu-plugin

core/helmrepositories/cloudnative-pg.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: cloudnative-pg
+  namespace: flux-system
+spec:
+  interval: 30m
+  url: https://cloudnative-pg.io/charts/
+  timeout: 3m

core/helmrepositories/kustomization.yaml

@@ -16,4 +16,5 @@ resources:
   - metrics-server.yaml
   - containeroo.yaml
   - cilium.yaml
+  - cloudnative-pg.yaml
   - falcosecurity.yaml

core/namespaces/cnpg-system.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cnpg-system

core/namespaces/kustomization.yaml

@@ -15,6 +15,7 @@ resources:
   - kube-system.yaml
   - usenet.yaml
   - cloudflare-operator.yaml
+  - cnpg-system.yaml
   - cert-manager.yaml
   - teslamate.yaml
   - minio.yaml

core/notifications/slack/alert.yaml

@@ -71,6 +71,9 @@ spec:
     - kind: HelmRelease
       namespace: falco
       name: "*"
+    - kind: HelmRelease
+      namespace: cnpg-system
+      name: "*"
   exclusionList:
     - InternalError.*failed to call webhook.*EOF
     - "dial tcp: lookup.*server misbehaving"

crds/README.md

@@ -5,6 +5,8 @@ This directory contains all CustomResourceDefinitions required.
 ## Contents
 
 - **cert-manager** provisions let's encrypt certificates
+- **cloudflare-operator** manages cloudflare dns records
+- **cloudnative-pg** manages postgresql databases
 - **k8up** backup operator
 - **kube-prometheus-stack** monitoring stack
 - **metallb** load balancer

crds/cloudnative-pg/crds.yaml

@@ -0,0 +1,48 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: cloudnative-pg
+  namespace: flux-system
+spec:
+  interval: 30m
+  url: https://github.com/cloudnative-pg/cloudnative-pg.git
+  ref:
+    # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
+    tag: v1.23.1
+  ignore: |
+    # exclude all
+    /*
+    # include deploy crds dir
+    !/config/crd
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: cloudnative-pg-crds
+  namespace: flux-system
+spec:
+  interval: 5m
+  prune: false
+  sourceRef:
+    kind: GitRepository
+    name: cloudnative-pg
+  healthChecks:
+    - apiVersion: apiextensions.k8s.io/v1
+      kind: CustomResourceDefinition
+      name: backups.postgresql.cnpg.io
+    - apiVersion: apiextensions.k8s.io/v1
+      kind: CustomResourceDefinition
+      name: clusterimagecatalogs.postgresql.cnpg.io
+    - apiVersion: apiextensions.k8s.io/v1
+      kind: CustomResourceDefinition
+      name: clusters.postgresql.cnpg.io
+    - apiVersion: apiextensions.k8s.io/v1
+      kind: CustomResourceDefinition
+      name: imagecatalogs.postgresql.cnpg.io
+    - apiVersion: apiextensions.k8s.io/v1
+      kind: CustomResourceDefinition
+      name: poolers.postgresql.cnpg.io
+    - apiVersion: apiextensions.k8s.io/v1
+      kind: CustomResourceDefinition
+      name: scheduledbackups.postgresql.cnpg.io

crds/cloudnative-pg/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - crds.yaml

crds/kustomization.yaml

@@ -2,6 +2,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - cloudnative-pg
   - cloudflare-operator
   - kube-prometheus-stack
   - cert-manager