From 9e2971f1bcc3008a68308826592c58ab75159847 Mon Sep 17 00:00:00 2001 From: chemavx Date: Mon, 22 Jun 2026 06:55:59 +0000 Subject: [PATCH] umami: repoint postgres to Infisical secret + flip to Recreate (3b-i) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit POSTGRES_PASSWORD now references umami-secrets-infisical. Adds strategy: Recreate (single-replica RWO PVC — avoids two postmasters racing PGDATA during a roll), permanent. Data dir already initialized, so the byte-identical POSTGRES_PASSWORD is never re-applied on restart (benign). umami still on old umami-secrets (both live in parallel = zero gap). Co-Authored-By: Claude Opus 4.8 --- umami/deployment.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/umami/deployment.yaml b/umami/deployment.yaml index dade2bd..808c6f3 100644 --- a/umami/deployment.yaml +++ b/umami/deployment.yaml @@ -30,6 +30,10 @@ metadata: app: postgres spec: replicas: 1 + # Single-replica Postgres on a RWO local-path PVC: Recreate avoids two postmasters + # briefly racing the same PGDATA during a roll (RollingUpdate surges a 2nd pod first). + strategy: + type: Recreate selector: matchLabels: app: postgres @@ -50,7 +54,7 @@ spec: - name: POSTGRES_PASSWORD valueFrom: secretKeyRef: - name: umami-secrets + name: umami-secrets-infisical key: postgres-password volumeMounts: - name: postgres-data