Skip to content

Commit

Permalink
Merge pull request #824 from bcgov/yj
Browse files Browse the repository at this point in the history
doc: netpol for DB
  • Loading branch information
ychung-mot authored Nov 26, 2024
2 parents 9523526 + 22360a6 commit 0d3acb3
Showing 1 changed file with 16 additions and 4 deletions.
20 changes: 16 additions & 4 deletions postgres/README.md
Original file line number Diff line number Diff line change
@@ -1,24 +1,36 @@
# Postgres

Short Term Rental Data Sharing System (STRDSS) is using bitnami/postgresql with chart version 15.5.20
The Short Term Rental Data Sharing System (STRDSS) utilizes the bitnami/postgresql Helm chart, version 15.5.38.

However, the network policy for the database is not managed by the Helm chart and must be created manually. This is due to the following configuration:

```yaml
networkPolicy:
enabled: false
```
Instead, the network policies for the database are created through the application Helm chart maintained in the application's GitOps repository. These policies include:
* [Allow ingress from backend](https://github.com/bcgov-c/tenant-gitops-b0471a/blob/07f42166586b9a9d986045a027bb0f0fa0b4981f/charts/backend/templates/backend-networkpolicy.yaml#L126).
* [Allow ingress from hangfire](https://github.com/bcgov-c/tenant-gitops-b0471a/blob/07f42166586b9a9d986045a027bb0f0fa0b4981f/charts/hangfire/templates/hangfire-networkpolicy.yaml#L74).
## List Helm Chart Versions
```sh
helm search repo bitnami/postgresql --versions
helm show values bitnami/postgresql --version 15.5.20
helm show values bitnami/postgresql --version 15.5.38
```

## Get Image Version

```sh
helm show values bitnami/postgresql --version 15.5.20 | yq eval '.image' -
helm show values bitnami/postgresql --version 15.5.38 | yq eval '.image' -
```

## Helm deploy

```sh
helm upgrade --install strdssdev bitnami/postgresql -f values-dev.yaml --version 15.5.20
helm upgrade --install strdssdev bitnami/postgresql -f values-dev.yaml --version 15.5.38
```

## Database Setup
Expand Down

0 comments on commit 0d3acb3

Please sign in to comment.