62 lines
1.3 KiB
YAML
62 lines
1.3 KiB
YAML
image:
|
|
repository: postgres
|
|
tag: "16-alpine"
|
|
pullPolicy: IfNotPresent
|
|
|
|
# Injecté par le provisioner (voir deploy/chart-gestion/registry-credentials)
|
|
# si un compte Docker Hub authentifié est configuré — évite le rate-limit de
|
|
# pull anonyme partagé par IP de nœud. Vide = pull anonyme (défaut).
|
|
imagePullSecrets: []
|
|
|
|
auth:
|
|
username: postgres
|
|
database: gestion_db
|
|
# À surcharger via --set auth.password=xxx
|
|
password: ""
|
|
|
|
persistence:
|
|
enabled: true
|
|
size: 10Gi
|
|
# Répliqué sur 2 nœuds (Longhorn) : survit à la perte d'un nœud. Voir
|
|
# deploy/longhorn/storageclass.yml pour le prérequis d'installation.
|
|
storageClass: "longhorn-replicated"
|
|
accessMode: ReadWriteOnce
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 5432
|
|
|
|
# Paramètres PostgreSQL (postgresql.conf)
|
|
config:
|
|
maxConnections: "200"
|
|
sharedBuffers: "256MB"
|
|
effectiveCacheSize: "768MB"
|
|
maintenanceWorkMem: "64MB"
|
|
walBuffers: "16MB"
|
|
defaultStatisticsTarget: "100"
|
|
randomPageCost: "1.1"
|
|
logMinDurationStatement: "1000"
|
|
|
|
podSecurityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 999
|
|
runAsGroup: 999
|
|
fsGroup: 999
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|