apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: pgadmin4
  namespace: pgadmin
spec:
  interval: 5m
  chart:
    spec:
      chart: pgadmin4
      version: "*"
      sourceRef:
        kind: HelmRepository
        name: pgadmin4
        namespace: flux-system
  install:
    createNamespace: true
  values:
    existingSecret: pgadmin-credentials
    secretKeys:
      pgadminPasswordKey: password
    env:
      email: admin@jpcit.co.za
    extraSecretMounts:
      - name: pgadmin-credentials
        secret: pgadmin-credentials
        subPath: password
        mountPath: /var/lib/pgadmin/storage/pgadmin/pg-cluster-password
        readOnly: true
    extraInitContainers: |
      - name: add-folder-for-pgpass
        image: "dpage/pgadmin4:9.13"
        command: ["/bin/mkdir", "-p", "/var/lib/pgadmin/storage/pgadmin"]
        volumeMounts:
          - name: pgadmin-data
            mountPath: /var/lib/pgadmin
        securityContext:
          runAsUser: 5050
    serverDefinitions:
      enabled: true
      resourceType: ConfigMap
      servers:
        "1":
          Name: pg-cluster
          Group: PostgreSQL
          Host: pg-cluster-rw.pg-databases.svc.cluster.local
          Port: 5432
          Username: postgres
          MaintenanceDB: postgres
          PasswordExecCommand: cat /var/lib/pgadmin/storage/pgadmin/pg-cluster-password
          ConnectionParameters:
            sslmode: prefer
            connect_timeout: 10
    ingress:
      enabled: true
      ingressClassName: traefik
      hosts:
        - host: pgadmin.jpcit.co.za
          paths:
            - path: /
              pathType: Prefix
      tls:
        - secretName: wildcard-jpcit-coza-tls
          hosts:
            - pgadmin.jpcit.co.za