fix: update openfga values

values/openfga/values-prod.yaml

@@ -3,16 +3,28 @@ replicaCount: 2
 datastore:
   engine: postgres
   uriSecret: prod-openfga-postgresql
+  migrationType: initContainer
 
 postgresql:
-  enabled: true
-  auth:
-    existingSecret: prod-openfga-postgresql
-    secretKeys:
-       userPasswordKey: postgres-password
+  enabled: false
+
+playground:
+  enabled: false
+
+telemetry:
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    enableRPCHistograms: true
+  trace:
+    enabled: true
+    otlp:
+      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+    sampleRatio: 0.1
 
 ingress:
-  enabled: true
+  enabled: false
   className: nginx
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-staging
@@ -24,8 +36,22 @@ ingress:
         - path: /
           pathType: ImplementationSpecific
   tls:
-   - secretName: staging-openfga-tls
+   - secretName: prod-openfga-tls
      hosts:
        - openfga.srv.oceanbox.io
 
-
+extraObjects:
+  - apiVersion: postgresql.cnpg.io/v1
+    kind: Cluster
+    metadata:
+      name: prod-openfga
+      namespace: openfga
+    spec:
+      instances: 1
+      # imageName: ghcr.io/cloudnative-pg/postgres:15-3.3
+      storage:
+        resizeInUseVolumes: true
+        size: 10Gi
+      backup:
+        retentionPolicy: 60d
+        target: prefer-standby

values/openfga/values-staging.yaml

@@ -3,16 +3,28 @@ replicaCount: 1
 datastore:
   engine: postgres
   uriSecret: staging-openfga-postgresql
+  migrationType: initContainer
 
 postgresql:
-  enabled: true
-  auth:
-    existingSecret: staging-openfga-postgresql
-    secretKeys:
-       userPasswordKey: postgres-password
+  enabled: false
+
+playground:
+  enabled: false
+
+telemetry:
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    enableRPCHistograms: true
+  trace:
+    enabled: true
+    otlp:
+      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+    sampleRatio: 0.1
 
 ingress:
-  enabled: true
+  enabled: false
   className: nginx
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-staging
@@ -27,3 +39,40 @@ ingress:
    - secretName: staging-openfga-tls
      hosts:
        - openfga.dev.oceanbox.io
+
+extraObjects:
+  - apiVersion: postgresql.cnpg.io/v1
+    kind: Cluster
+    metadata:
+      name: staging-openfga
+      namespace: openfga
+    spec:
+      instances: 1
+      # imageName: ghcr.io/cloudnative-pg/postgres:15-3.3
+      storage:
+        resizeInUseVolumes: true
+        size: 10Gi
+      backup:
+        retentionPolicy: 60d
+        target: prefer-standby
+      bootstrap:
+        pg_basebackup:
+          database: ""
+          owner: ""
+          source: openfga
+      enableSuperuserAccess: true
+      externalClusters:
+      - name: openfga
+        connectionParameters:
+          host: prod-openfga-rw.openfga.svc.cluster.local
+          sslmode: verify-full
+          user: streaming_replica
+        sslCert:
+          key: tls.crt
+          name: prod-openfga-replication
+        sslKey:
+          key: tls.key
+          name: prodopenfga-replication
+        sslRootCert:
+          key: ca.crt
+          name: prod-openfga-ca