9ca7f7bd7a
- Add allowedExtensions: ['*'] so roles can CREATE EXTENSION - Grant superuser to 'memory' role (was createdb/createrole, insufficient) - Needed for mem0 plugin pgvector backend on agent_memory DB Unblocks kanban task t_3d94b392
68 lines
1.5 KiB
YAML
68 lines
1.5 KiB
YAML
apiVersion: postgresql.cnpg.io/v1
|
|
kind: Cluster
|
|
metadata:
|
|
name: hermes-pgdb
|
|
namespace: customer1
|
|
|
|
spec:
|
|
instances: 1
|
|
# Custom image with pgvector extension
|
|
imageName: "gcr.io/devops-lab-cluster/postgres-pgvector:15.2-0.8.0"
|
|
storage:
|
|
size: 20Gi
|
|
|
|
# pgvector extension configuration
|
|
sharedPreloadLibraries:
|
|
- pgvector
|
|
|
|
postgresql:
|
|
allowedExtensions:
|
|
- "*"
|
|
parameters:
|
|
# pgvector HNSW index memory settings
|
|
maintenance_work_mem: "256MB"
|
|
|
|
managed:
|
|
roles:
|
|
- name: hermes
|
|
ensure: present
|
|
login: true
|
|
passwordSecret:
|
|
name: hermes-db-credentials
|
|
- name: trading
|
|
ensure: present
|
|
login: true
|
|
passwordSecret:
|
|
name: trading-db-credentials
|
|
- name: memory
|
|
ensure: present
|
|
login: true
|
|
superuser: true
|
|
passwordSecret:
|
|
name: memory-db-credentials
|
|
|
|
bootstrap:
|
|
initdb:
|
|
database: hermes_memory
|
|
owner: hermes
|
|
secret:
|
|
name: hermes-db-credentials
|
|
|
|
serviceAccountTemplate:
|
|
metadata:
|
|
name: cnpg-backup-sa
|
|
annotations:
|
|
iam.gke.io/gcp-service-account: cnpg-backup-sa@devops-lab-cluster.iam.gserviceaccount.com
|
|
|
|
backup:
|
|
barmanObjectStore:
|
|
destinationPath: "gs://customer1_db_backup/hermes-backups/"
|
|
googleCredentials:
|
|
gkeEnvironment: true
|
|
wal:
|
|
compression: gzip
|
|
data:
|
|
compression: gzip
|
|
jobs: 2
|
|
retentionPolicy: "30d"
|
|
target: primary
|