apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    sealos-db-provider-cr: {{.Values.pgsqlLog.name}}
    app.kubernetes.io/instance: {{.Values.pgsqlLog.name}}
    app.kubernetes.io/managed-by: kbcli
  name: {{.Values.pgsqlLog.name}}
  namespace: {{.Release.Namespace}}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  labels:
    sealos-db-provider-cr: {{.Values.pgsqlLog.name}}
    app.kubernetes.io/instance: {{.Values.pgsqlLog.name}}
    app.kubernetes.io/managed-by: kbcli
  name: {{.Values.pgsqlLog.name}}
  namespace: {{.Release.Namespace}}
rules:
  - apiGroups:
      - '*'
    resources:
      - '*'
    verbs:
      - '*'
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    sealos-db-provider-cr: {{.Values.pgsqlLog.name}}
    app.kubernetes.io/instance: {{.Values.pgsqlLog.name}}
    app.kubernetes.io/managed-by: kbcli
  name: {{.Values.pgsqlLog.name}}
  namespace: {{.Release.Namespace}}
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: {{.Values.pgsqlLog.name}}
subjects:
  - kind: ServiceAccount
    name: {{.Values.pgsqlLog.name}}
    namespace: {{.Release.Namespace}}
---
apiVersion: apps.kubeblocks.io/v1alpha1
kind: Cluster
metadata:
  labels:
    clusterdefinition.kubeblocks.io/name: postgresql
    clusterversion.kubeblocks.io/name: {{ .Values.pgsqlLog.version }}
  name: {{.Values.pgsqlLog.name}}
  namespace: {{.Release.Namespace}}
spec:
  affinity:
    nodeLabels: {}
    podAntiAffinity: Preferred
    tenancy: SharedNode
    topologyKeys:
      - kubernetes.io/hostname
  backup:
    cronExpression: {{.Values.pgsqlLog.backup.cron}}
    enabled: true
    method: dump
    pitrEnabled: true
    retentionPeriod: {{.Values.pgsqlLog.backup.retentionPeriod}}
  clusterDefinitionRef: postgresql
  clusterVersionRef: {{ .Values.pgsqlLog.version }}
  componentSpecs:
    - componentDefRef: postgresql
      monitor: true
      name: postgresql
      replicas: {{ .Values.pgsqlLog.replicas }}
      resources: {{ toYaml .Values.pgsqlLog.resources | nindent 8 }}
      serviceAccountName: {{.Values.pgsqlLog.name}}
      switchPolicy:
        type: Noop
      volumeClaimTemplates:
        - name: data
          spec:
            accessModes:
              - ReadWriteOnce
            resources:
              requests:
                storage: {{ .Values.pgsqlLog.storage }}
  terminationPolicy: Delete