enable SSL and CA cert for lightspeed-stack

template.yaml

@@ -178,6 +178,8 @@ objects:
           db: ${env.ASSISTED_CHAT_POSTGRES_NAME}
           user: ${env.ASSISTED_CHAT_POSTGRES_USER}
           password: ${env.ASSISTED_CHAT_POSTGRES_PASSWORD}
+          ssl_mode: "verify-full"
+          ca_cert_path: /etc/tls/ca-bundle.pem
           namespace: lightspeed-stack
     system_prompt: |
       You are OpenShift Lightspeed Intelligent Assistant - an intelligent virtual assistant and expert on all things related to OpenShift installation, configuration, and troubleshooting, specifically with the Assisted Installer.
@@ -454,12 +456,6 @@ objects:
               secretKeyRef:
                 name: ${ASSISTED_CHAT_DB_SECRET_NAME}
                 key: db.password
-          - name: ASSISTED_CHAT_POSTGRES_CA_CERT
-            valueFrom:
-              secretKeyRef:
-                name: ${ASSISTED_CHAT_DB_SECRET_NAME}
-                key: db.ca_cert
-                optional: true
           resources:
             limits:
               memory: ${MEMORY_LIMIT}
@@ -479,6 +475,9 @@ objects:
             subPath: llama_stack_client_config.yaml
           - name: data-storage
             mountPath: ${STORAGE_MOUNT_PATH}
+          - name: db-ca-cert
+            mountPath: /etc/tls
+            readOnly: true
           livenessProbe:
             httpGet:
               path: /liveness
@@ -536,6 +535,13 @@ objects:
             name: llama-stack-client-config
         - name: data-storage
           emptyDir: {}
+        - name: db-ca-cert
+          secret:
+            secretName: ${ASSISTED_CHAT_DB_SECRET_NAME}
+            items:
+            - key: db.ca_cert
+              path: ca-bundle.pem
+              optional: true
 
 - apiVersion: v1
   kind: Service