CloudNativePG: современный способ запуска PostgreSQL на Kubernetes

apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: my-database
spec:
  instances: 3
  storage:
    size: 1Gi

# Deploy CloudNative-PG Operator
resource "helm_release" "cloudnative_pg" {
  name             = "cloudnative-pg"
  repository       = "https://cloudnative-pg.github.io/charts"
  chart            = "cloudnative-pg"
  version          = "0.27.0"
  namespace        = "cnpg-system"
  cleanup_on_fail  = true
  create_namespace = true
}

# Deploy Barman Cloud Plugin for backup management
resource "helm_release" "barman_cloud" {
  name             = "plugin-barman-cloud"
  repository       = "https://cloudnative-pg.github.io/charts"
  chart            = "plugin-barman-cloud"
  namespace        = "cnpg-system"
  cleanup_on_fail  = true
  create_namespace = false

  depends_on = [
    helm_release.cloudnative_pg
  ]
}

# Generate a secure password for the database user
resource "random_password" "my_app_user" {
  length  = 32
  special = false
}

module "postgres_cluster" {
  source = "github.com/pascalinthecloud/terraform-module-cnpg-database?ref=v0.0.6"

  databases = [
    {
      name                        = "my-app-postgres"
      owner                       = "my_app_user"
      password                    = random_password.my_app_user.result
      reclaim_policy              = "Retain"
      create_connection_secret    = true
      connection_secret_namespace = "my-app"
    }
  ]

  cluster = {
    name          = "postgres-cluster"
    namespace     = kubernetes_namespace.databases.metadata[0].name
    instances     = 3
    storage_class = "your-storage-class"   # e.g. longhorn, rook-ceph, gp3, etc.
    storage_size  = "20Gi"
    postgresql_max_connections = "200"
  }

  labels = {
    app         = "postgres-cluster"
    environment = "production"
    managed-by  = "terraform"
  }

  backup = {
    enabled                 = true
    s3_endpoint_url         = "https://s3.example.com:9000"
    s3_bucket_name          = var.backup_bucket_name
    s3_access_key_id        = var.s3_access_key_id
    s3_secret_access_key    = var.s3_secret_access_key
    retention_policy        = "90d"
    schedule                = "0 2 * * *"   # Daily at 2 AM UTC
    wal_compression         = "gzip"
    data_compression        = "gzip"
    target                  = "prefer-standby"
    create_scheduled_backup = true
  }
}

databases = [
  {
    name                        = "my-app-postgres"
    owner                       = "my_app_user"
    password                    = random_password.my_app_user.result
    reclaim_policy              = "Retain"
    create_connection_secret    = true
    connection_secret_namespace = "my-app"
  },
  {
    name                        = "another-service-postgres"
    owner                       = "another_service_user"
    password                    = random_password.another_service_user.result
    reclaim_policy              = "Retain"
    create_connection_secret    = true
    connection_secret_namespace = "another-service"
  }
]