From d2d75bd3a59dfeb5102c4c5d6b09eb68dd1ef98f Mon Sep 17 00:00:00 2001
From: nold <nold@gnu.one>
Date: Sat, 10 Dec 2022 21:03:19 +0100
Subject: [PATCH] add(cnpg)

---
 projects/services/project.yml      |  6 ++++
 projects/services/values/cnpg.yaml | 57 ++++++++++++++++++++++++++++++
 2 files changed, 63 insertions(+)
 create mode 100644 projects/services/values/cnpg.yaml

diff --git a/projects/services/project.yml b/projects/services/project.yml
index dd3afd15..8be432d1 100644
--- a/projects/services/project.yml
+++ b/projects/services/project.yml
@@ -17,3 +17,9 @@ apps:
     keys:
     - root-user
     - root-password
+
+- name: cnpg
+  namespace: cnpg-system
+  repoURL: https://cloudnative-pg.github.io/charts
+  chart: cloudnative-pg
+  targetRevision: 0.16.0
diff --git a/projects/services/values/cnpg.yaml b/projects/services/values/cnpg.yaml
new file mode 100644
index 00000000..f19846ed
--- /dev/null
+++ b/projects/services/values/cnpg.yaml
@@ -0,0 +1,57 @@
+replicaCount: 1
+
+image:
+  repository: ghcr.io/cloudnative-pg/cloudnative-pg
+  pullPolicy: IfNotPresent
+  # -- Overrides the image tag whose default is the chart appVersion.
+  tag: ""
+
+crds:
+  create: true
+
+webhook:
+  port: 9443
+  mutating:
+    create: true
+    failurePolicy: Fail
+  validating:
+    create: true
+    failurePolicy: Fail
+
+# Operator configuration
+config:
+  # -- Specifies whether the secret should be created
+  create: true
+  # -- Specifies whether it should be stored in a secret, instead of a configmap
+  secret: false
+  # Examples:
+  # INHERITED_ANNOTATIONS: categories
+  # INHERITED_LABELS: environment, workload, app
+
+  data: {}
+  name: cnpg-controller-manager-config
+
+# -- Additinal arguments to be added to the operator's args list
+additionalArgs: []
+
+serviceAccount:
+  # -- Specifies whether the service account should be created
+  create: true
+  # -- The name of the service account to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name: ""
+
+# -- Security Context for the whole pod
+podSecurityContext:
+  runAsNonRoot: true
+  seccompProfile:
+    type: RuntimeDefault
+  # fsGroup: 2000
+
+resources: {}
+  # limits:
+  #   cpu: 100m
+  #   memory: 200Mi
+  # requests:
+  #   cpu: 100m
+  #   memory: 100Mi