Merge remote-tracking branch 'origin/main' into nixidy

values/openfga/migration-job.yaml

@@ -0,0 +1,42 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: staging-openfga-migrate
+  labels:
+    helm.sh/chart: openfga-0.2.12
+    app.kubernetes.io/name: openfga
+    app.kubernetes.io/instance: staging
+    app.kubernetes.io/version: "v1.5.9"
+    app.kubernetes.io/managed-by: Helm
+  annotations:
+    helm.sh/hook: post-install, post-upgrade, post-rollback, post-delete
+    helm.sh/hook-delete-policy: before-hook-creation
+    helm.sh/hook-weight: "-5"
+spec:
+  template:
+    metadata:
+      annotations:
+        helm.sh/hook: post-install, post-upgrade, post-rollback, post-delete
+        helm.sh/hook-delete-policy: before-hook-creation
+        helm.sh/hook-weight: "-5"
+    spec:
+      serviceAccountName: staging-openfga
+      containers:
+        - name: migrate-database
+          securityContext:
+            {}
+          image: "openfga/openfga:v1.5.9"
+          args: ["migrate"]
+          env:
+            - name: OPENFGA_DATASTORE_ENGINE
+              value: "postgres"
+            - name: OPENFGA_DATASTORE_URI
+              valueFrom:
+                secretKeyRef:
+                  name: "staging-openfga-postgresql"
+                  key: "uri"
+
+          resources:
+            {}
+      restartPolicy: Never
+  backoffLimit: 1

values/openfga/postgres-secret.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+stringData:
+  postgres-password: tidings-guise-sternness-yummy
+  uri:  postgres://postgres:tidings-guise-sternness-yummy@staging-openfga-postgresql.idp.svc.cluster.local:5432/postgres?sslmode=disable
+kind: Secret
+metadata:
+  name: staging-openfga-postgresql
+  namespace: idp
+type: Opaque
+---
+apiVersion: v1
+stringData:
+  postgres-password: unaltered-astute-raven-sitter
+  uri:  postgres://postgres:unaltered-astute-raven-sitter@prod-openfga-postgresql.idp.svc.cluster.local:5432/postgres?sslmode=disable
+kind: Secret
+metadata:
+  name: prod-openfga-postgresql
+  namespace: idp
+type: Opaque
+