Don Kendall
8630efc3d7
# Add Helm Chart - Introduces a Twenty Helm chart with sensible defaults: internal Postgres/Redis, auto DB creation/user, migrations, TLS via cert-manager, and quickstart docs. ## Feedback requested - Handling replicas > 1 with local storage (warn/force S3?). - Defaults/guards for ephemeral pods + S3.
44 lines
1.2 KiB
YAML
44 lines
1.2 KiB
YAML
suite: app user and database initialization
|
|
templates:
|
|
- templates/secret-db-url.yaml
|
|
- templates/deployment-server.yaml
|
|
release:
|
|
name: my-twenty
|
|
namespace: default
|
|
tests:
|
|
- it: db-url secret includes app password
|
|
template: templates/secret-db-url.yaml
|
|
set:
|
|
db.enabled: true
|
|
db.internal.appUser: twenty_app_user
|
|
asserts:
|
|
- isKind:
|
|
of: Secret
|
|
- equal:
|
|
path: metadata.name
|
|
value: my-twenty-twenty-db-url
|
|
- isNotEmpty:
|
|
path: stringData.appPassword
|
|
|
|
- it: server init container creates app user with proper permissions
|
|
template: templates/deployment-server.yaml
|
|
set:
|
|
db.enabled: true
|
|
db.internal.appUser: test_user
|
|
db.internal.database: testdb
|
|
asserts:
|
|
- matchRegex:
|
|
path: spec.template.spec.initContainers[?(@.name=="ensure-database-exists")].command[2]
|
|
pattern: CREATE USER
|
|
|
|
- it: db url uses app user not superuser
|
|
template: templates/secret-db-url.yaml
|
|
set:
|
|
db.enabled: true
|
|
db.internal.appUser: my_app
|
|
db.internal.database: mydb
|
|
asserts:
|
|
- matchRegex:
|
|
path: stringData.url
|
|
pattern: ^postgres://my_app:.*@my-twenty-twenty-db
|