apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: postgresql
  namespace: database
spec:
  interval: 5m
  chart:
    spec:
      chart: postgresql
      version: 16.0.x
      sourceRef:
        kind: HelmRepository
        name: bitnami-charts
        namespace: flux-system
  values:
    auth:
      existingSecret: "pgsql-secrets"
      secretKeys:
        adminPasswordKey: "adminPassword"
        replicationPasswordKey: "replicationPassword"

    tls:
      enabled: true
      certificatesSecret: postgres-cert
      certFilename: "tls.crt"
      certKeyFilename: "tls.key"

    serviceMonitor:
      enabled: true
      labels:
        release: kube-prometheus-stack

    volumePermissions:
      enabled: true

    primary:
      persistence:
        existingClaim: "postgresql-pv-claim"

      containerSecurityContext:
        enabled: true
        runAsUser: 10000

    readReplicas:
      containerSecurityContext:
        enabled: true
        runAsUser: 10000