feat: move D601 HWLAB GitOps to UniDesk YAML

config/platform-db/postgres-pk01.yaml

@@ -8,6 +8,7 @@ metadata:
   relatedIssues:
     - 280
     - 281
+    - 1119
 
 cluster:
   role: primary
@@ -84,7 +85,7 @@ postgres:
           purpose: admin-and-secret-sync
         - id: D601-public
           cidr: 36.49.29.73/32
-          purpose: platform-infra-standby-app
+          purpose: platform-infra-and-hwlab-v03-app
   tuning:
     maxConnections: 50
     sharedBuffers: 512MB
@@ -135,6 +136,11 @@ postgres:
         user: sub2api
         address: 36.49.29.73/32
         method: scram-sha-256
+      - type: hostssl
+        database: hwlab_d601_v03
+        user: hwlab_d601_v03_app
+        address: 36.49.29.73/32
+        method: scram-sha-256
 
 secrets:
   source: master-local
@@ -154,6 +160,20 @@ secrets:
           SUB2API_DB_NAME: sub2api
         randomHex:
           SUB2API_DB_PASSWORD: 32
+    - name: hwlab-d601-v03-db-credentials
+      sourceRef: platform-db/hwlab-d601-v03-db.env
+      type: env
+      requiredKeys:
+        - HWLAB_D601_V03_DB_USER
+        - HWLAB_D601_V03_DB_PASSWORD
+        - HWLAB_D601_V03_DB_NAME
+      createIfMissing:
+        enabled: true
+        values:
+          HWLAB_D601_V03_DB_USER: hwlab_d601_v03_app
+          HWLAB_D601_V03_DB_NAME: hwlab_d601_v03
+        randomHex:
+          HWLAB_D601_V03_DB_PASSWORD: 32
 
 objects:
   roles:
@@ -166,12 +186,26 @@ objects:
         createdb: false
         createrole: false
         superuser: false
+    - name: hwlab_d601_v03_app
+      passwordRef:
+        sourceRef: platform-db/hwlab-d601-v03-db.env
+        key: HWLAB_D601_V03_DB_PASSWORD
+      login: true
+      attributes:
+        createdb: false
+        createrole: false
+        superuser: false
   databases:
     - name: sub2api
       owner: sub2api
       encoding: UTF8
       locale: C.UTF-8
       extensions: []
+    - name: hwlab_d601_v03
+      owner: hwlab_d601_v03_app
+      encoding: UTF8
+      locale: C.UTF-8
+      extensions: []
 
 exports:
   connectionStrings:
@@ -190,6 +224,36 @@ exports:
         - scope: platform-infra
           secret: sub2api-secrets
           key: DATABASE_URL
+    - name: hwlab-d601-v03-cloud-api-database-url
+      sourceSecretRef: platform-db/hwlab-d601-v03-db.env
+      render:
+        envKey: DATABASE_URL
+        format: postgresql://$(HWLAB_D601_V03_DB_USER):$(HWLAB_D601_V03_DB_PASSWORD)@$(PGHOST):5432/$(HWLAB_D601_V03_DB_NAME)?sslmode=require
+        variables:
+          PGHOST: 82.156.23.220
+      writeToSecretSource:
+        sourceRef: hwlab/d601-v03-cloud-api-db.env
+        key: DATABASE_URL
+        mode: update-or-insert
+      consumers:
+        - scope: hwlab-v03
+          secret: hwlab-cloud-api-v03-db
+          key: database-url
+    - name: hwlab-d601-v03-openfga-datastore-uri
+      sourceSecretRef: platform-db/hwlab-d601-v03-db.env
+      render:
+        envKey: DATASTORE_URI
+        format: postgresql://$(HWLAB_D601_V03_DB_USER):$(HWLAB_D601_V03_DB_PASSWORD)@$(PGHOST):5432/$(HWLAB_D601_V03_DB_NAME)?sslmode=require
+        variables:
+          PGHOST: 82.156.23.220
+      writeToSecretSource:
+        sourceRef: hwlab/d601-v03-openfga-db.env
+        key: DATASTORE_URI
+        mode: update-or-insert
+      consumers:
+        - scope: hwlab-v03
+          secret: hwlab-v03-openfga
+          key: datastore-uri
 
 backup:
   phase: minimum-restoreable