Use separate postgres cluster per app

apps/lldap/database.yaml

@@ -0,0 +1,30 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: lldap
+spec:
+  chart:
+    spec:
+      chart: cluster
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        kind: HelmRepository
+        name: cnpg
+        namespace: cnpg-system
+      version: 0.0.11
+  interval: 1m0s
+  values:
+    type: postgresql
+    mode: standalone
+    cluster:
+      instances: 1
+    backups:
+      enabled: true
+      provider: s3
+      endpointURL: https://s3.us-west-002.backblazeb2.com
+      s3:
+        bucket: titan-k3s-backup
+        path: /postgres
+      secret:
+        create: false
+        name: b2-access-key

apps/lldap/deployment.yaml

@@ -7,7 +7,6 @@ metadata:
   labels:
     app: lldap
   name: lldap
-  namespace: lldap
 spec:
   replicas: 1
   selector:

apps/lldap/kustomization.yaml

@@ -1,8 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: lldap
 resources:
   - ./namespace.yaml
   - ./pvc.yaml
   - ./secret.yaml
+  - ./database.yaml
   - ./deployment.yaml
   - ./service.yaml
+  - ../../secrets/b2-access-key.yaml

apps/lldap/secret.yaml

@@ -2,7 +2,6 @@ apiVersion: v1
 kind: Secret
 metadata:
     name: lldap-credentials
-    namespace: lldap
 type: Opaque
 data:
     lldap-jwt-secret: ENC[AES256_GCM,data:099Cx7Wcf4yUmIE6npIiz7axzHyuHbbKpRII9pLqyY34FksvBPUy7XFJg4U=,iv:mHviMV32LkimVcUAEKJESBJHs/sH4UMARg0uA9DAyzs=,tag:YmczpX3ESNY87jG59SJfDA==,type:str]

apps/lldap/service.yaml

@@ -7,7 +7,6 @@ metadata:
   labels:
     app: lldap-service
   name: lldap-service
-  namespace: lldap
 spec:
   ports:
     - name: "3890"