pgadmin-values.yaml

replicaCount: 1

## pgAdmin4 container image
##
image:
  registry: docker.io
  repository: dpage/pgadmin4
  tag: "8.6"
  pullPolicy: IfNotPresent

## Deployment annotations
annotations: {}

service:
  type: ClusterIP
  port: 80
  targetPort: http
  # targetPort: 4181 To be used with a proxy extraContainer
  portName: http

  annotations: {}
   
serviceAccount:
  # Specifies whether a service account should be created
  create: false
  # Annotations to add to the service account
  annotations: {}
  
  name: ""


strategy: {}

serverDefinitions:
  ## If true, server definitions will be created
  ##
  enabled: true

  ## The resource type to use for deploying server definitions.
  ## Can either be ConfigMap or Secret
  resourceType: ConfigMap

  # servers:
  #   server1:
  #     Name: "Zitadel"
  #     Group: "Servers"
  #     Host: "131.130.102.246"
  #     Port: 5432
  #     Username: "postgres"
  #     MaintenanceDB: "postgres"
  #     Shared: true
  #     ConnectionParameters:
  #       passfile: "../../file.pgpass"
  servers:
    server1:
      Name: "Zitadel"
      Group: "Servers"
      Host: "131.130.102.246"
      Port: 5432
      MaintenanceDB: "postgres"
      Username: "postgres"
      SSLMode: "verify-ca"
      Comment: "This server has every option configured in the JSON"
      PassFile: "../../file.pgpass"
      SSLCert: "/postgres-cert/tls.crt"
      SSLKey: "/postgres-cert/tls.key"
      SSLRootCert: "/postgres-cert/ca.crt"
    # server2:
    #   Name: "Zitadel2"
    #   Group: "Servers"
    #   Host: "131.130.102.246"
    #   Port: 5432
    #   MaintenanceDB: "postgres"
    #   Username: "zitadel"
    #   SSLMode: "verify-ca"
    #   Comment: "This server has every option configured in the JSON"
    #   PassFile: "../../file.pgpass"
    #   SSLCert: "../../tls.crt"
    #   SSLKey: "../../tls.key"
    #   SSLRootCert: "../../ca.crt"
    #   BGColor: "#ff9900"
    #   FGColor: "#000000"

extraSecretMounts:
  - name: pgpassfile
    secret: pgadmin-pgpassfile-secret
    mountPath: "/tmp/file.pgpass"
    subPath: pgpassfile
  - name: postgres-certs
    secret: postgres-cert
    mountPath: "/var/lib/pgadmin/storage/zitadel-admin_netsnek.com/postgres-cert/"
    readOnly: true
  # - name: pgadmin-certs
  #   secret: pgadmin-cert
  #   mountPath: "/var/lib/pgadmin/certs/pgadmin-cert"
  #   readOnly: true

## Additional InitContainers to initialize the pod
##
extraInitContainers: |
  - name: prepare-pgpass
    image: "dpage/pgadmin4:4.23"
    command:
      - /bin/sh
      - -c
      - |
        mkdir -p /var/lib/pgadmin/storage/
        mkdir -p /var/lib/pgadmin/certs/
        cat /tmp/file.pgpass > /var/lib/pgadmin/file.pgpass
    volumeMounts:
      - name: pgadmin-data
        mountPath: /var/lib/pgadmin
      - name: pgpassfile
        mountPath: /tmp/file.pgpass
        subPath: pgpassfile
        readOnly: true
    securityContext:
      runAsUser: 5050

networkPolicy:
  enabled: true

ingress:
  enabled: true
  annotations:
    kubernetes.io/tls-acme: "true"
    # cert-manager.io/cluster-issuer: letsencrypt-prod
  ingressClassName: public
  hosts:
    - host: pgadmin.netsnek.com
      paths:
        - path: /
          pathType: Prefix
  # tls:
  #   - secretName: pgadmin-tls
  #     hosts:
  #       - pgadmin.host.net

# Additional config maps to be mounted inside a container
# Can be used to map config maps for sidecar as well
#extraConfigmapMounts: []

# Add config_local.py file to set OAuth2 configuration
# For details check documentation
# https://www.pgadmin.org/docs/pgadmin4/latest/oauth2.html
extraConfigmapMounts:
  - name: config-local
    configMap: pgadmin4-config
    subPath: config_local.py
    mountPath: "/pgadmin4/config_local.py"
    readOnly: true

existingSecret: ""

envVarsFromSecrets:
  - pgadmin4-oauth2-secret

env:
  # can be email or nickname
  email: zitadel-admin@netsnek.com
  password: SuperSecret
  #pgpassfile: /var/lib/pgadmin/storage/pgadmin/file.pgpass
  
  enhanced_cookie_protection: "False"

persistentVolume:
  
  enabled: true

  annotations: {}

  accessModes:
    - ReadWriteOnce

  size: 10Gi

securityContext:
  runAsUser: 5050
  runAsGroup: 5050
  fsGroup: 5050

livenessProbe:
  initialDelaySeconds: 30
  periodSeconds: 60
  timeoutSeconds: 15
  successThreshold: 1
  failureThreshold: 3

readinessProbe:
  initialDelaySeconds: 30
  periodSeconds: 60
  timeoutSeconds: 15
  successThreshold: 1
  failureThreshold: 3

VolumePermissions:
  ## If true, enables an InitContainer to set permissions on /var/lib/pgadmin.
  ##
  enabled: true

containerPorts:
  http: 80

resources:
 
  limits:
    cpu: 300m
    memory: 500Mi
  requests:
    cpu: 150m
    memory: 400Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

## Pod affinity
##
affinity: {}

## Pod annotations
##
podAnnotations: {}

## Pod labels
##
podLabels: {}
  # key1: value1
  # key2: value2

init:
  ## Init container resources
  ##
  resources: {}

## Define values for chart tests
test:
  ## Container image for test-connection.yaml
  image:
    registry: docker.io
    repository: busybox
    tag: latest
  ## Resources request/limit for test-connection Pod
  resources: {}

  securityContext:
    runAsUser: 5051
    runAsGroup: 5051
    fsGroup: 5051