refactor: switch to hclod object storage

cnpg/cluster/resources/pool.yaml

@@ -14,5 +14,6 @@ spec:
     parameters:
       max_client_conn: "1000"
       default_pool_size: "10"
+      ignore_startup_parameters: "search_path"
   monitoring:
-    enablePodMonitor: true
+    enablePodMonitor: true

forgejo/config/values.forgejo.yaml

@@ -65,10 +65,10 @@ gitea:
       PROVIDER_CONFIG: redis://forgejo-session.forgejo.svc:6379/0?pool_size=100&idle_timeout=180s&
     storage:
       STORAGE_TYPE: minio
-      MINIO_ENDPOINT: garage.garage.svc:3900
-      MINIO_BUCKET: forgejo
-      MINIO_LOCATION: hel1
-      MINIO_USE_SSL: "false"
+      MINIO_ENDPOINT: fsn1.your-objectstorage.com:443
+      MINIO_BUCKET: 1661580-forgejo
+      MINIO_LOCATION: auto
+      MINIO_USE_SSL: "true"
     indexer:
       ISSUE_INDEXER_TYPE: meilisearch
       ISSUE_INDEXER_NAME: gitea_issues

garage/migrate/resources/job.migrate.yaml

@@ -2,7 +2,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: sync-garage-blog
+  name: sync-garage-forgejo
   namespace: garage
 spec:
   ttlSecondsAfterFinished: 100
@@ -20,8 +20,8 @@ spec:
             - --ignore-errors
             - -s3-upload-concurrency 64
             - -v
-            - garage:blog
-            - hcloud:1661580-blog
+            - garage:forgejo
+            - hcloud:1661580-forgejo
           volumeMounts:
             - name: rclone-config
               mountPath: /config/rclone

umami/resources/deployment.yaml

@@ -4,7 +4,7 @@ kind: Deployment
 metadata:
   name: umami
 spec:
-  replicas: 2
+  replicas: 1
   selector:
     matchLabels:
       app.kubernetes.io/name: umami
@@ -25,7 +25,7 @@ spec:
             - name: DATABASE_URL
               valueFrom:
                 secretKeyRef:
-                  name: db-credentials-umami
+                  name: default-cluster-pguser-umami
                   key: PQ_URL
           envFrom:
             - configMapRef:
@@ -66,9 +66,9 @@ spec:
               memory: "256Mi"
               cpu: "300m"
           ports:
-          - containerPort: 3000
-            protocol: TCP
-            name: web
+            - containerPort: 3000
+              protocol: TCP
+              name: web
           livenessProbe:
             httpGet:
               path: /api/heartbeat
@@ -100,4 +100,4 @@ spec:
       securityContext:
         runAsUser: 1000
         runAsGroup: 1000
-        runAsNonRoot: true
+        runAsNonRoot: true