try and launch some k8s

kubernetes/postgresql/postgres-db-sealedsecrets.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: postgres-db-secrets
+  namespace: grassroots
+spec:
+  encryptedData:
+    postgresql-password: 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
+    postgresql-replication-password: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: postgres-db-secrets
+      namespace: grassroots
+

kubernetes/postgresql/postgres-helmrelease.yaml

@@ -0,0 +1,35 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: postgresql 
+  namespace: grassroots 
+spec:
+  # The interval at which to reconcile the Helm release
+  interval: 10m
+  chart:
+    spec:
+      # The name of the chart as made available by the HelmRepository
+      # (without any aliases)
+      chart: postgresql
+      # A fixed SemVer, or any SemVer range
+      # (i.e. >=4.0.0 <5.0.0)
+      version: 10.3.17 
+      # The reference to the HelmRepository
+      sourceRef:
+        kind: HelmRepository
+        name: bitnami 
+        # Optional, defaults to the namespace of the HelmRelease
+        namespace: default
+  values:
+    image:
+      tag: 12.5.0 
+    existingSecret: postgres-db-secrets
+    postgresqlDatabase: postgres
+    volumePermissions: # related to permissions error on file postgres/data when pod restart
+      enabled: true
+    initdbScriptsConfigMap: postgres-initdb-scipts
+    initdbUser: postgres
+    replication:
+      readReplicas: 0
+    metrics:
+      enabled: true 

kubernetes/postgresql/postgres-initdb-scripts-configMap.yaml

@@ -0,0 +1,21 @@
+# https://kubernetes.io/docs/concepts/configuration/configmap/
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: postgres-initdb-scipts
+  namespace: grassroots
+data:
+  create_db.sql: |
+    CREATE ROLE common_role;
+    CREATE USER grassroots WITH PASSWORD 'tralala' CREATEDB;
+    CREATE DATABASE "cic_cache";
+    CREATE DATABASE "cic_eth";
+    CREATE DATABASE "cic_notify";
+    CREATE DATABASE "cic_meta";
+    CREATE DATABASE "cic_signer";
+    CREATE DATABASE "cic_ussd";
+    CREATE DATABASE "cic_syncer";
+    GRANT ALL PRIVILEGES 
+    ON DATABASE "cic_cache", "cic_eth", "cic_notify", "cic_meta", "cic_signer", "cic_ussd", "cic_syncer"
+    TO grassroots;
+