fix: don't use kustomize for openfga

applications/openfga.yaml

@@ -27,16 +27,16 @@ spec:
         namespace: idp
         server: '{{ .cluster }}'
       source:
-        repoURL: https://gitlab.com/oceanbox/manifests.git
+        - repoURL: https://openfga.github.io/helm-charts
-        targetRevision: main
+          targetRevision: 0.2.12
-        path: kustomizations/openfga
+          chart: openfga
-        plugin:
+          helm:
-          name: kustomize-helm-with-rewrite
+            valueFiles:
-          parameters:
+              - $values/kustomizations/openfga/values.yaml
-          - name: env
+              - $values/kustomizations/openfga/values-{{ env }}.yaml
-            string: '{{ .env }}'
+        - repoURL: https://gitlab.com/oceanbox/manifests.git
-          - name: hostname
+          targetRevision: main
-            string: '{{ .hostname }}'
+          ref: values
   templatePatch: |
     {{- if .autoSync }}
     spec:

kustomizations/openfga/base/cluster.yaml

@@ -1,19 +0,0 @@
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: openfga-db
-spec:
-  enableSuperuserAccess: true
-  instances: 2
-  logLevel: info
-  storage:
-    pvcTemplate:
-      accessModes:
-      - ReadWriteOnce
-      resources:
-        requests:
-          storage: 1Gi
-      storageClassName: managed-nfs-storage
-      volumeMode: Filesystem
-    resizeInUseVolumes: true
-    size: 1Gi

kustomizations/openfga/base/kustomization.yaml

@@ -1,5 +0,0 @@
-generatorOptions:
-  disableNameSuffixHash: true
-resources:
-  - cluster.yaml
-  - _manifest.yaml

kustomizations/openfga/chart

@@ -1 +0,0 @@
-openfga/openfga

kustomizations/openfga/prod/kustomization.yaml

@@ -1,3 +0,0 @@
-namePrefix: prod-
-resources:
-  - ../base

kustomizations/openfga/staging/cluster_patch.yaml

@@ -1,3 +0,0 @@
-- op: replace
-  path: /spec/instances
-  value: 1

kustomizations/openfga/staging/kustomization.yaml

@@ -1,9 +0,0 @@
-namePrefix: staging-
-patches:
-  - target:
-      group: postgresql.cnpg.io
-      version: v1
-      kind: Cluster
-    path: cluster_patch.yaml
-resources:
-  - ../base

kustomizations/openfga/values-prod.yaml

@@ -2,15 +2,15 @@ replicaCount: 2
 
 datastore:
   engine: postgres
-  uri: postgres://prod-openfga-db.idp.svc.cluster.local:5432/app?sslmode=disable
+  uri: postgres://prod-openfga-postgresql.idp.svc.cluster.local:5432/openfga?sslmode=disable
 
 postgresql:
   enabled: true
   auth:
-    username: app
+    existingSecret: prod-openfga-postgresql
-    existingSecret: prod-openfga-db-app
     secretKeys:
-       userPasswordKey: password
+       adminPasswordKey: admin-password
+       userPasswordKey: postgres-password
 
 playground:
   enabled: false

kustomizations/openfga/values-staging.yaml

@@ -2,15 +2,15 @@ replicaCount: 1
 
 datastore:
   engine: postgres
-  uri: postgres://staging-openfga-db.idp.svc.cluster.local:5432/app?sslmode=disable
+  uri: postgres://staging-openfga-postgresql.idp.svc.cluster.local:5432/openfga?sslmode=disable
 
 postgresql:
   enabled: true
   auth:
-    username: app
+    existingSecret: staging-openfga-postgresql
-    existingSecret: staging-openfga-db-app
     secretKeys:
-       userPasswordKey: password
+       adminPasswordKey: admin-password
+       userPasswordKey: postgres-password
 
 playground:
   enabled: true

kustomizations/openfga/values.yaml

@@ -0,0 +1,3 @@
+fullnameOverride: openfga
+
+