database stuff

deployment/backend.yml

@@ -1,8 +1 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: backend-config
-data:
-  DB_SERVER_HOST:
-  DB_SERVER_PORT:
 

deployment/frontend.yml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: frontend-config
+data:
+  ZBX_SERVER_HOST: backend.zabbix.svc.cluster.local

deployment/namespace

@@ -0,0 +1 @@
+zabbix

deployment/roll-db-credential.sh

@@ -0,0 +1,49 @@
+#!/bin/bash
+
+. ../../ENVDB
+
+DATABASE=zabbix
+LOGIN=zabbix
+PASSWORD=`openssl rand -base64 24`
+NAMESPACE=$(cat namespace)
+
+ARG1=$1
+
+if [ "$ARG1" = "initial" ]; then
+psql <<EOF
+do
+\$\$
+begin
+  CREATE USER $LOGIN;
+  COMMIT;
+  CREATE DATABASE $DATABASE WITH OWNER $LOGIN;
+end
+\$\$
+;
+commit;
+EOF
+fi
+
+psql <<EOF
+do
+\$\$
+begin
+  ALTER USER $LOGIN WITH PASSWORD '$PASSWORD';
+  GRANT ALL PRIVILEGES ON DATABASE $DATABASE TO $LOGIN;
+end
+\$\$
+;
+commit;
+EOF
+
+kubectl create secret generic database-cred \
+  --dry-run=client \
+  -o yaml \
+  --save-config \
+  --from-literal=POSTGRES_USER="$LOGIN" \
+  --from-literal=POSTGRES_PASSWORD="$PASSWORD" | \
+  --from-literal=POSTGRES_DB="$DATABASE" | \
+  --from-literal=DB_SERVER_HOST="timescaledb.database.svc.cluster.local" | \
+kubectl apply -f - -n $NAMESPACE
+
+