fix: update openfga

apps/openfga.yaml

@@ -1,5 +1,45 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
+metadata:
+  name: prod-openfga
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: openfga
+    server: https://kubernetes.default.svc
+  project: aux
+  # ignoreDifferences:
+  # - group: apps
+  #   kind: StatefulSet
+  #   jsonPointers:
+  #   - /spec/persistentVolumeClaimRetentionPolicy
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        component: aux
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+    automated:
+      prune: true
+      selfHeal: true
+  sources:
+  - repoURL: https://openfga.github.io/helm-charts
+    targetRevision: 0.2.19
+    chart: openfga
+    helm:
+      valueFiles:
+      - $values/values/openfga/values-prod.yaml
+  - repoURL: https://gitlab.com/oceanbox/manifests.git
+    targetRevision: nixidy
+    ref: values
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
 metadata:
   name: staging-openfga
   namespace: argocd
@@ -33,8 +73,7 @@ spec:
     chart: openfga
     helm:
       valueFiles:
-      - $values/values/openfga/values.yaml
       - $values/values/openfga/values-staging.yaml
   - repoURL: https://gitlab.com/oceanbox/manifests.git
-    targetRevision: main
+    targetRevision: nixidy
     ref: values

values/openfga/postgres-secret.yaml

@@ -1,20 +1,19 @@
 apiVersion: v1
 stringData:
-  postgres-password: tidings-guise-sternness-yummy
-  uri:  postgres://postgres:tidings-guise-sternness-yummy@staging-openfga-postgresql.idp.svc.cluster.local:5432/postgres?sslmode=disable
+  postgres-password: blT6zzv37KyFvzb1Ct3bhfAwPxhTG2fBO1EiIASQWI4wnEOB8AOWvmVa2sogGexr
+  uri:  postgres://postgres:blT6zzv37KyFvzb1Ct3bhfAwPxhTG2fBO1EiIASQWI4wnEOB8AOWvmVa2sogGexr@prod-openfga-rw.openfga.svc.cluster.local:5432/postgres?sslmode=disable
 kind: Secret
 metadata:
-  name: staging-openfga-postgresql
-  namespace: idp
+  name: prod-openfga-postgresql
+  namespace: openfga
 type: Opaque
 ---
 apiVersion: v1
 stringData:
-  postgres-password: unaltered-astute-raven-sitter
-  uri:  postgres://postgres:unaltered-astute-raven-sitter@prod-openfga-postgresql.idp.svc.cluster.local:5432/postgres?sslmode=disable
+  postgres-password: tidings-guise-sternness-yummy
+  uri:  postgres://postgres:tidings-guise-sternness-yummy@staging-openfga-rw.openfga.svc.cluster.local:5432/postgres?sslmode=disable
 kind: Secret
 metadata:
-  name: prod-openfga-postgresql
-  namespace: idp
+  name: staging-openfga-postgresql
+  namespace: openfga
 type: Opaque
-

values/openfga/values-staging.yaml

@@ -72,7 +72,7 @@ extraObjects:
           name: prod-openfga-replication
         sslKey:
           key: tls.key
-          name: prodopenfga-replication
+          name: prod-openfga-replication
         sslRootCert:
           key: ca.crt
           name: prod-openfga-ca

values/openfga/values.yaml

@@ -1,8 +0,0 @@
-# fullnameOverride: openfga
-
-playground:
-  enabled: false
-  port: 3000
-
-
-