Skip to content
This repository was archived by the owner on Sep 9, 2026. It is now read-only.

OSAC-1085: Auto-generate secrets for bundled Postgres - #267

Merged
eliorerz merged 2 commits into
osac-project:mainfrom
eliorerz:feat/osac-1085-bundled-postgres-secrets
Jun 12, 2026
Merged

eliorerz merged 2 commits into
osac-project:mainfrom
eliorerz:feat/osac-1085-bundled-postgres-secrets

Conversation

@eliorerz

Copy link
Copy Markdown
Contributor

Summary

  • When bundledPostgres.enabled: true, the chart auto-creates the fulfillment-db Secret and postgres-client-cert-service cert-manager Certificate, eliminating ~40 lines of manual shell commands from the deployment guide (Phase 2, section 2.2)
  • Gated behind bundledPostgres.enabled (default: false) — production deployments with external databases are unaffected
  • Adds CI values file to validate the template branch renders correctly

Files

File Change
charts/osac/templates/bundled-postgres.yaml New — Secret + Certificate, gated by bundledPostgres.enabled
charts/osac/values.yaml Add bundledPostgres section (default disabled)
charts/osac/values.schema.json Add schema for bundledPostgres
charts/osac/values-example.yaml Add documented entry with deploy instructions
charts/osac/ci/bundled-postgres-values.yaml New — CI values exercising the enabled path
docs/helm-deployment-guide.md Shortcut note in section 2.2

Test plan

  • helm lint charts/osac/ passes
  • All CI values files template successfully (default, full, no-aap, bundled-postgres)
  • fulfillment-db Secret and postgres-client-service Certificate render when bundledPostgres.enabled: true
  • Neither resource renders when bundledPostgres.enabled: false
  • JSON schema validates (python3 -m json.tool charts/osac/values.schema.json)
  • Deploy with bundled postgres on a test cluster and verify fulfillment-service connects

eliorerz added 2 commits June 11, 2026 15:45
Comprehensive example values file with inline comments explaining each
field, accepted values, and required markers. Covers both production
(external Postgres with mTLS, pinned images) and development (bundled
dependencies, latest images) scenarios.
When bundledPostgres.enabled is true, the chart now auto-creates the
fulfillment-db Secret and postgres-client-cert-service Certificate,
eliminating the manual secret creation steps for dev/test deployments
using the bundled postgres chart.
@coderabbitai

coderabbitai Bot commented Jun 11, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@eliorerz, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 4 minutes and 1 second. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more credits in the billing tab to continue.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: osac-project/coderabbit/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Enterprise

Run ID: a476b919-cf55-4658-b369-4c32876b0b13

📥 Commits

Reviewing files that changed from the base of the PR and between fdea72d and 56c3a98.

📒 Files selected for processing (6)
  • charts/osac/ci/bundled-postgres-values.yaml
  • charts/osac/templates/bundled-postgres.yaml
  • charts/osac/values-example.yaml
  • charts/osac/values.schema.json
  • charts/osac/values.yaml
  • docs/helm-deployment-guide.md
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci-robot

openshift-ci-robot commented Jun 11, 2026

Copy link
Copy Markdown

@eliorerz: This pull request references OSAC-1085 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "5.0.0" version, but no target version was set.

Details

In response to this:

Summary

  • When bundledPostgres.enabled: true, the chart auto-creates the fulfillment-db Secret and postgres-client-cert-service cert-manager Certificate, eliminating ~40 lines of manual shell commands from the deployment guide (Phase 2, section 2.2)
  • Gated behind bundledPostgres.enabled (default: false) — production deployments with external databases are unaffected
  • Adds CI values file to validate the template branch renders correctly

Files

File Change
charts/osac/templates/bundled-postgres.yaml New — Secret + Certificate, gated by bundledPostgres.enabled
charts/osac/values.yaml Add bundledPostgres section (default disabled)
charts/osac/values.schema.json Add schema for bundledPostgres
charts/osac/values-example.yaml Add documented entry with deploy instructions
charts/osac/ci/bundled-postgres-values.yaml New — CI values exercising the enabled path
docs/helm-deployment-guide.md Shortcut note in section 2.2

Test plan

  • helm lint charts/osac/ passes
  • All CI values files template successfully (default, full, no-aap, bundled-postgres)
  • fulfillment-db Secret and postgres-client-service Certificate render when bundledPostgres.enabled: true
  • Neither resource renders when bundledPostgres.enabled: false
  • JSON schema validates (python3 -m json.tool charts/osac/values.schema.json)
  • Deploy with bundled postgres on a test cluster and verify fulfillment-service connects

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci

openshift-ci Bot commented Jun 11, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: eliorerz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@eliorerz
eliorerz merged commit bffd729 into osac-project:main Jun 12, 2026
7 of 8 checks passed
@eliorerz
eliorerz deleted the feat/osac-1085-bundled-postgres-secrets branch June 12, 2026 07:02
@eliorerz eliorerz added the lgtm label Jun 12, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants