- op: replace
  path: /spec/template/spec/containers/0/env
  value:
    - name: QL3_CLUSTER_IDENTITY
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-recovery-config
          key: cluster-identity
    - name: QL3_KUBERNETES_NAMESPACE
      valueFrom:
        fieldRef:
          apiVersion: v1
          fieldPath: metadata.namespace
    - name: QL3_PLUGIN_PACKAGE_OCI_REGISTRIES
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-recovery-config
          key: oci-registries
    - name: QL3_PLUGIN_PACKAGE_PUBLISHER_TRUST_FILE
      value: /var/run/qinglong3/plugin-package-trust/publishers.json
    - name: QL3_PLUGIN_PACKAGE_TRUST_AUTHORITY_ID
      value: cluster
    - name: QL3_PLUGIN_PACKAGE_OCI_TIMEOUT_MS
      value: '15000'
    - name: QL3_PLUGIN_PACKAGE_RECOVERY_PAGE_SIZE
      value: '16'
    - name: QL3_PLUGIN_PACKAGE_RECOVERY_MAX_PAGES
      value: '16'
    - name: QL3_POSTGRES_TLS_MODE
      value: verify-full
    - name: QL3_POSTGRES_TLS_CA_FILE
      value: /var/run/secrets/qinglong3/postgres-package-executor/ca.crt
    - name: QL3_POSTGRES_APPLICATION_NAME
      value: qinglong3-plugin-package-recovery
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_HOST
      value: ql3-postgres-rw.qinglong3-system.svc
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_PORT
      value: '5432'
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_DATABASE
      value: qinglong
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_USER
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-package-executor-auth
          key: username
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_PASSWORD
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-package-executor-auth
          key: password
    - name: QL3_POSTGRES_TLS_SERVERNAME
      value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
  path: /spec/template/spec/volumes/2/secret/secretName
  value: ql3-postgres-ca
- op: replace
  path: /spec/template/spec/volumes/2/secret/items/0/key
  value: ca.crt