- op: replace
  path: /spec/template/spec/containers/0/env
  value:
    - name: QL3_PROFILE
      value: cluster-admin
    - name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_EXECUTOR_ENABLED
      value: 'true'
    - name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_WRITE_TERMINATION_MESSAGE
      value: 'true'
    - name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_COMMAND_FILE
      value: /var/run/qinglong3/provider-credential-test/command.json
    - name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_ALLOWLIST_FILE
      value: /var/run/qinglong3/provider-credential-test/allowlist.json
    - name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_SECRET_ROOT
      value: /var/run/secrets/qinglong3/provider-credential-test
    - name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_DENY_CANARY_HOST
      value: kubernetes.default.svc
    - name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_DENY_CANARY_PORT
      value: '443'
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_TLS_MODE
      value: verify-full
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_TLS_CA_FILE
      value: /var/run/secrets/qinglong3/postgres-ai-credential-tester/ca.crt
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_APPLICATION_NAME
      value: qinglong3-ai-credential-tester
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_POOL_MAX
      value: '1'
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_HOST
      value: ql3-postgres-rw.qinglong3-system.svc
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_PORT
      value: '5432'
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_DATABASE
      value: qinglong
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_USER
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-ai-credential-tester-auth
          key: username
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_PASSWORD
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-ai-credential-tester-auth
          key: password
    - name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_TLS_SERVERNAME
      value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
  path: /spec/template/spec/volumes/3/secret/secretName
  value: ql3-postgres-ca
- op: replace
  path: /spec/template/spec/volumes/3/secret/items/0/key
  value: ca.crt