feat: Added lldap

apps/lldap/base/cluster-restore.yaml

@@ -1,16 +0,0 @@
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: lldap-db
-spec:
-  bootstrap:
-    recovery:
-      source: source
-  externalClusters:
-    - name: source
-      plugin:
-        name: barman-cloud.cloudnative-pg.io
-        parameters:
-          barmanObjectName: garage-store
-          serverName: lldap-db
-  plugins: []

apps/lldap/base/cluster.yaml

@@ -1,7 +1,7 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
-  name: db
+  name: lldap-db
   namespace: lldap
   # TODO: Add labels?
 spec:

apps/lldap/base/deployment.yaml

@@ -56,7 +56,7 @@ spec:
             - name: LLDAP_DATABASE_URL
               valueFrom:
                 secretKeyRef:
-                  name: db-app
+                  name: lldap-db-app
                   key: uri
             - name: TZ
               value: CET

apps/lldap/base/garage-s3-garage.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: s3-garage
-  namespace: lldap
+  namespace: cnpg-system
   annotations:
     reflector.v1.k8s.emberstack.com/reflects: "cnpg-system/s3-garage"
 type: Opaque

apps/lldap/base/kustomization.yaml

@@ -9,9 +9,3 @@ resources:
   - http-route.yaml
   - secret-s3-garage.yaml
   - object-store.yaml
-
-# Uncomment to restore database from backup
-# patches:
-#   - path: cluster-restore.yaml
-#     target:
-#       kind: Cluster

apps/lldap/base/object-store.yaml

@@ -5,7 +5,8 @@ metadata:
   namespace: lldap
 spec:
   configuration:
-    destinationPath: s3://cnpg-backup/lldap
+    destinationPath: s3://cnpg-backup/
+    endpointURL: http://192.178.1.1:3900
     s3Credentials:
       accessKeyId:
         name: s3-garage
@@ -13,8 +14,5 @@ spec:
       secretAccessKey:
         name: s3-garage
         key: ACCESS_SECRET_KEY
-      region:
-        name: s3-garage
-        key: REGION
     wal:
       compression: gzip

apps/lldap/production/cluster.yaml

@@ -1,6 +1,6 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
-  name: db
+  name: lldap-db
 spec:
   instances: 2

apps/lldap/staging/cluster.yaml

@@ -1,6 +1,6 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
-  name: db
+  name: lldap-db
 spec:
   instances: 1

apps/lldap/staging/kustomization.yaml

@@ -10,9 +10,6 @@ patches:
   - path: cluster.yaml
     target:
       kind: Cluster
-  - path: object-store.yaml
-    target:
-      kind: ObjectStore
   - path: http-route.yaml
     target:
       kind: HTTPRoute

apps/lldap/staging/object-store.yaml

@@ -1,8 +0,0 @@
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: garage-store
-  namespace: lldap
-spec:
-  configuration:
-    endpointURL: http://192.168.1.1:3900

controllers/cnpg/staging/secret-s3-garage.enc.yaml

@@ -8,8 +8,7 @@ metadata:
 type: Opaque
 stringData:
     ACCESS_KEY_ID: ENC[AES256_GCM,data:TOEQMG/kHs5XUk77ijyV089ZTq1dKsoZUas=,iv:mVDOkl5qOxGdvCvdcXUuUjX85oKqbd+n5maHsKwCiFg=,tag:pho0oWPTwtM6lGQ2vA1d5A==,type:str]
-    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:INipEOcpPSij6TDu+bCuMOdsGm58nEBC4UJfEGRqeMmXZ9A+EBrMiRL6z3s29uz4qdqwZ3C8E4PVz01/41bMEA==,iv:x+gku8q7efHaaMpD/dc19IrwmK2gDp04bjH8WN/xhkc=,tag:QiSF6B8IqMrCsOUCe8c0bw==,type:str]
+    SECRET_ACCESS_KEY: ENC[AES256_GCM,data:mc42T/AQ8NRi32SzvwGJA6LEq1x0Yz3Tu+CPDYPf+E2+C00zQcGRk6tACPvRoMxRzU4ZZpK346e2K/8ajU77hg==,iv:Isxe81aQEbI5xd1dRjXDKj/2Jp9eTHdv0/XVBBHoRyE=,tag:gtcmKmfUIfIy977Df11P4g==,type:str]
-    REGION: ENC[AES256_GCM,data:WIGPWwii,iv:ZdP5uNYqa8CZxa/xyrYXxGvE9fzt95slzwpzSzRy9DY=,tag:yANYtLzJCL/1pcvBXY7X7g==,type:str]
 sops:
     age:
         - recipient: age1860txadrlqrjwnqh0g466re2nt8jk7xhj640pq9gpsddpg23uynqsp2hul
@@ -30,8 +29,8 @@ sops:
             K09tZGI0Z2w0eXh5eHcvcEttMy82aU0K2fnCDfYIShzw2Zipof+C8zf9pcOmiDg9
             2SCiIfAJs9MB3n078P068z77KpvdlJYOi9pUTKSBhNw+mBI24y6X6A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-18T02:50:50Z"
+    lastmodified: "2025-12-18T01:50:56Z"
-    mac: ENC[AES256_GCM,data:+kfs0EDnnZNnHMf91P6rAN52lugHFO4XcNJiKLpXt7bfTSMbiwgVbvRElXGTbLXLVSz70uZyzV/mt0ZcfEfPbwE/Pdh6SmFiWwQwLT1M50MdrxAWWYvSCS9r4h1Cow3N3K2/dXH7N/4AVHTg3ohXlP92fxVh1wL0cVnke/lcQgY=,iv:M5n9+lgq0fBx5Yg1e0N6v0obbnmarvVwIHAjCr5XmM4=,tag:NBA01MtG40T3nST7b00tiw==,type:str]
+    mac: ENC[AES256_GCM,data:Wul3Dc7nvnBwmuTp+yIuaMRg//ui4rhZFsOlfOYeUx7z5ObGA0KIIgk8BM73/R4Hkzg2G/wKrUdWRa8wXFAwxzBEtFaXUgaSJhUjzMnDtVp+PiTLYWSYt8rx8S+lKbXk+2KLQOaHi10XO3P5JIXtEhP6K2a4rONwsi2224QPSec=,iv:OW4qY4oJXhi/EpktCW/9u8mhQQSaizc89lRFecOPo5w=,tag:fZqV8/0Nm/KGfGgmXNC4kg==,type:str]
     pgp:
         - created_at: "2025-12-11T23:56:15Z"
           enc: |-

controllers/reflector/helm-release.yaml

@@ -16,7 +16,7 @@ spec:
   chart:
     spec:
       chart: reflector
-      version: "9.1.x"
+      version: "0.5.x"
       sourceRef:
         kind: HelmRepository
         name: reflector

controllers/reflector/helm-repository.yaml

@@ -6,4 +6,4 @@ metadata:
 spec:
   type: "oci"
   interval: 24h
-  url: oci://ghcr.io/emberstack/helm-charts
+  url: oci://ghcr.io/emberstack/helm-charts/reflector