open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-23 12:05:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(ql3): add opt-in security administration job

Browse Source
This commit is contained in:
whyour
2026-08-25 03:15:37 +08:00
parent fbedae0116
commit 931f9eee38
31 changed files with 1606 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/kubernetes/ql3-cluster/operations/security-administration/cloudnative-pg/job-patch.yaml
+31
View File
@@ -0,0 +1,31 @@
- op: replace
path: /spec/template/spec/containers/0/env
value:
- name: QL3_POSTGRES_ADMIN_TLS_MODE
value: verify-full
- name: QL3_POSTGRES_ADMIN_TLS_CA_FILE
value: /var/run/secrets/qinglong3/postgres-security-administration/ca.crt
- name: QL3_POSTGRES_ADMIN_HOST
value: ql3-postgres-rw.qinglong3-system.svc
- name: QL3_POSTGRES_ADMIN_PORT
value: '5432'
- name: QL3_POSTGRES_ADMIN_DATABASE
value: qinglong
- name: QL3_POSTGRES_ADMIN_USER
valueFrom:
secretKeyRef:
name: ql3-postgres-admin-auth
key: username
- name: QL3_POSTGRES_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: ql3-postgres-admin-auth
key: password
- name: QL3_POSTGRES_ADMIN_TLS_SERVERNAME
value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
path: /spec/template/spec/volumes/2/secret/secretName
value: ql3-postgres-ca
- op: replace
path: /spec/template/spec/volumes/2/secret/items/0/key
value: ca.crt