feat(grafana): provision new DB

kube-prometheus/config/values.prometheus.yaml

@@ -74,17 +74,17 @@ grafana:
     enabled: false
   envFromSecrets:
     - name: grafana-auth
-    - name: grafana-db
+    - name: db-credentials-grafana
   grafana.ini:
     server:
       domain: grafana.icb4dc0.de
       root_url: "https://%(domain)s"
     database:
       type: postgres
-      host: default-cluster-primary.postgres.svc:5432
-      name: grafana
-      user: "${GF_DB_USER}"
-      password: "${GF_DB_PASSWORD}"
+      host: app-cluster-pooler-rw.postgres.svc:5432
+      name: "${DATABASE_NAME}"
+      user: "${LOGIN}"
+      password: "${PASSWORD}"
       ssl_mode: require
     auth:
       disable_login_form: true

kube-prometheus/kustomization.yaml

@@ -7,6 +7,8 @@ resources:
   - resources/secret.grafana-admin.yaml
   - resources/secret.auth.yaml
   - resources/secret.db.yaml
+  - resources/db/db.yaml
+  - resources/db/user.yaml
   - resources/http_routes.grafana.yaml
 
 helmCharts:

kube-prometheus/resources/db/db.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: db.movetokube.com/v1alpha1
+kind: Postgres
+metadata:
+  name: grafana
+spec:
+  database: grafana
+  dropOnDelete: false

kube-prometheus/resources/db/user.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: db.movetokube.com/v1alpha1
+kind: PostgresUser
+metadata:
+  name: grafana
+spec:
+  role: grafana
+  database: grafana
+  secretName: db-credentials
+  privileges: OWNER