nixfiles/cluster/postgres.tf

variable "postgres_password" {
    type = string
}

resource "kubernetes_namespace" "postgres_namespace" {
    metadata { 
        name = "postgresql"
    }
}

resource "kubernetes_secret" "postgres_auth_secret" {
    depends_on = [
        kubernetes_namespace.postgres_namespace
    ]

    metadata {
        name = "postgres-auth-secret"
        namespace = "postgresql"
    }
    data = {
        postgres-password = var.postgres_password
    }
    type = "Opaque"
}

resource "kubernetes_persistent_volume_claim" "postgresql" {
    metadata {
        name = "prometheus-data"
        namespace = "postgresql"
    }
    spec {
        access_modes = [ "ReadWriteOnce" ]
        resources {
            requests = {
                storage = "8Gi"
            }
        }
        storage_class_name = "local-path"
    }
}

resource "helm_release" "postgresql" {
    depends_on = [
        kubernetes_namespace.postgres_namespace,
        kubernetes_secret.postgres_auth_secret
    ]

    name = "postgresql"
    repository = "https://charts.bitnami.com/bitnami"
    chart = "postgresql"
    namespace = "postgresql"

    timeout = var.helm_timeout
    cleanup_on_fail = true
    force_update = true

    set {
        name = "persistence.existingClaim"
        value = kubernetes_persistent_volume_claim.postgresql.metadata[0].name
    }
    set {
        name = "global.postgresql.existingSecret"
        value = "postgres-auth-secret"
    }
}