kube_cluster 1.1.0 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5439cb8e1c5dcc7f1cb319b5523241aaa2a2fbc94e52e03e3316a7c383f435fd
-  data.tar.gz: 8052cb7358d8b8846d3503dcc586c36b1dae29cc5ab8d4638bcbaf83de29b9a7
+  metadata.gz: '0768b58c75b80c58ddbe6bbae20aab3e57cad3a607058d7c2ebe64662d601f14'
+  data.tar.gz: b6260994b93ce8c91c897d6e44fb771fb2df82eebab158353485a8423ba9a61a
 SHA512:
-  metadata.gz: f11d2e8c01f906b1b1f7999db505c3791fcf91496890c3b8a39d1f9660ea04d3d26812942a479a51572f3c27aff1ec8db22e92fe2c059aba5bb7787c8c410cd2
-  data.tar.gz: f39b6d6878548cdea033d94978f487777b8f7537807e0884463df15d7edf2c47ba472556bff0ac245b1ed547e10ffa6eb88347528609039cd0af454f1177afd4
+  metadata.gz: 0d10e0cda8c7483ca5190dc2351cf12a4a9ea856a61498cc1b210c1ff431d0e20c1fbe1908520f05c799329e1304d10ec1cdb0dcc7a80cd550ad8d0fc1ea695d
+  data.tar.gz: ba7e0fcd06465f26a7d6197f41c4de71e713ebb06bde325433ac3dc41390ae7e95571e04cad35110f5cf4e17613262dae9189c8da3d35de4683b55537983ef7c

data/CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.0] - 2026-07-13
+
+### Added
+- `Standard::CloudNativePg::PostgresCluster` — the standard single-node
+  PostgreSQL cluster (custom image, HA replication slots, logical WAL,
+  barman-cloud WAL archiving) preconfigured; deployment-specific spec (managed
+  roles, etc.) via the block.
+
+## [1.2.1] - 2026-07-13
+
+### Added
+- `Standard::CloudNativePg::Cluster` — a thin CloudNativePG `Cluster` CR wrapper
+  (sets `metadata.name`/`metadata.namespace`; the large, deployment-specific spec
+  is supplied via the block).
+
 ## [1.1.0] - 2026-07-13
 
 ### Added

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    kube_cluster (1.1.0)
+    kube_cluster (1.3.0)
       activesupport (~> 8.0)
       kube_kubectl (~> 2.0)
       kube_schema (~> 1.9.2)

data/flake.nix

@@ -22,6 +22,7 @@
           ];
 
           buildInputs = [
+            pkgs.trufflehog
             ruby
             pkgs.libyaml # psych gem
             pkgs.openssl # openssl gem

data/lefthook.yml

@@ -1,9 +1,11 @@
 # Git hooks (managed by lefthook). Install with `bundle exec lefthook install`.
 #
-# Run the full test suite before every commit; a failing test blocks the
-# commit. Wrapped in `nix develop --command` because the hook fires outside the
-# flake devshell, so bundler/scampi wouldn't otherwise be on PATH.
+# pre-commit: scan for secrets (trufflehog) and run the test suite (bin/test).
+# Both are wrapped in `nix develop --command` because the hook fires outside the
+# flake devshell, so trufflehog / bundler / scampi wouldn't otherwise be on PATH.
 pre-commit:
   commands:
+    secrets:
+      run: nix develop --command trufflehog git file://. --since-commit HEAD --only-verified --fail
     tests:
       run: nix develop --command bin/test

data/lib/kube/cluster/standard/cloud_native_pg/cluster.rb

@@ -7,8 +7,17 @@ module Kube
   module Cluster
     module Standard
       module CloudNativePg
-        #class Cluster < Kube::Cluster["Cluster"]
-        #end
+        # A CloudNativePG Cluster CR. Thin wrapper: sets metadata, leaves the
+        # (large, deployment-specific) spec to the block.
+        class Cluster < Kube::Cluster["Cluster"]
+          def initialize(name: "postgres", namespace: nil, &block)
+            super() {
+              metadata.name = name
+              metadata.namespace = namespace if namespace
+              instance_exec(&block) if block
+            }
+          end
+        end
       end
     end
   end
@@ -16,12 +25,15 @@ end
 
 __END__
 
-#describe "CloudNativePg::Cluster" do
-#  it "initializes without error" do
-#    Kube::Cluster::Standard::CloudNativePg::Cluster
-#      .new()
-#      .to_yaml
-#      .is_a?(String)
-#      .should == true
-#  end
-#end
+describe "CloudNativePg::Cluster" do
+  it "initializes without error" do
+    Kube::Cluster::Standard::CloudNativePg::Cluster
+      .new(name: "postgres", namespace: "cloudnative-pg") {
+        spec.instances = 1
+        spec.storage = { size: "1Gi" }
+      }
+      .to_yaml
+      .is_a?(String)
+      .should == true
+  end
+end

data/lib/kube/cluster/standard/cloud_native_pg/postgres_cluster.rb

@@ -0,0 +1,128 @@
+# frozen_string_literal: true
+
+require "bundler/setup"
+require "kube/cluster"
+require "kube/cluster/standard/cloud_native_pg/cluster"
+
+module Kube
+  module Cluster
+    module Standard
+      module CloudNativePg
+        # The standard single-node PostgreSQL cluster: custom image, HA
+        # replication slots, logical WAL, and barman-cloud WAL archiving.
+        # Deployment-specific additions (managed roles, extra spec) come via the
+        # block; databases are separate Database CRs.
+        class PostgresCluster < Cluster
+          def initialize(name: "postgres", namespace: nil, &block)
+            super(name: name, namespace: namespace) {
+              spec.affinity = { podAntiAffinityType: "preferred" }
+              spec.bootstrap = {
+                initdb: {
+                  database: "app",
+                  encoding: "UTF8",
+                  localeCType: "C",
+                  localeCollate: "C",
+                  owner: "app",
+                },
+              }
+              spec.enablePDB = true
+              spec.enableSuperuserAccess = false
+              spec.failoverDelay = 0
+              spec.imageName = "ghcr.io/general-intelligence-systems/postgresql:17-custom"
+              spec.imagePullPolicy = "Always"
+              spec.instances = 1
+              spec.plugins = [{
+                name: "barman-cloud.cloudnative-pg.io",
+                isWALArchiver: true,
+                parameters: { barmanObjectName: "cnpg-backups" },
+              }]
+              spec.logLevel = "info"
+              spec.maxSyncReplicas = 0
+              spec.minSyncReplicas = 0
+              spec.monitoring = {
+                disableDefaultQueries: false,
+                enablePodMonitor: false,
+              }
+              spec.postgresGID = 26
+              spec.postgresUID = 26
+              spec.postgresql = {
+                parameters: {
+                  archive_mode: "on",
+                  archive_timeout: "5min",
+                  dynamic_shared_memory_type: "posix",
+                  full_page_writes: "on",
+                  log_destination: "csvlog",
+                  log_directory: "/controller/log",
+                  log_filename: "postgres",
+                  log_rotation_age: "0",
+                  log_rotation_size: "0",
+                  log_truncate_on_rotation: "false",
+                  logging_collector: "on",
+                  max_parallel_workers: "32",
+                  max_replication_slots: "32",
+                  max_worker_processes: "32",
+                  shared_memory_type: "mmap",
+                  shared_preload_libraries: "",
+                  ssl_max_protocol_version: "TLSv1.3",
+                  ssl_min_protocol_version: "TLSv1.3",
+                  wal_keep_size: "512MB",
+                  wal_level: "logical",
+                  wal_log_hints: "on",
+                  wal_receiver_timeout: "5s",
+                  wal_sender_timeout: "5s",
+                },
+                syncReplicaElectionConstraint: {
+                  enabled: false,
+                },
+              }
+              spec.primaryUpdateMethod = "restart"
+              spec.primaryUpdateStrategy = "unsupervised"
+              spec.probes = {
+                liveness: {
+                  isolationCheck: {
+                    connectionTimeout: 1000,
+                    enabled: true,
+                    requestTimeout: 1000,
+                  },
+                },
+              }
+              spec.replicationSlots = {
+                highAvailability: {
+                  enabled: true,
+                  slotPrefix: "_cnpg_",
+                },
+                synchronizeReplicas: {
+                  enabled: true,
+                },
+                updateInterval: 30,
+              }
+              spec.resources = {}
+              spec.smartShutdownTimeout = 180
+              spec.startDelay = 3600
+              spec.stopDelay = 1800
+              spec.storage = {
+                resizeInUseVolumes: true,
+                size: "5Gi",
+              }
+              spec.switchoverDelay = 3600
+
+              instance_exec(&block) if block
+            }
+          end
+        end
+      end
+    end
+  end
+end
+
+__END__
+
+describe "CloudNativePg::PostgresCluster" do
+  it "initializes without error" do
+    Kube::Cluster::Standard::CloudNativePg::PostgresCluster
+      .new(namespace: "cloudnative-pg")
+      .to_yaml
+      .is_a?(String)
+      .should == true
+  end
+end

data/lib/kube/cluster/version.rb

@@ -2,6 +2,6 @@
 
 module Kube
   module Cluster
-    VERSION = "1.1.0"
+    VERSION = "1.3.0"
   end
 end

data/lib/kube/cluster.rb

@@ -109,6 +109,7 @@ Kube::Cluster.config do
   resolve "DecoratorController",      to: "metacontroller.k8s.io/v1alpha1/DecoratorController"
 
   # CloudNativePG.
+  resolve "Cluster",                  to: "postgresql.cnpg.io/v1/Cluster"
   resolve "Database",                 to: "postgresql.cnpg.io/v1/Database"
 
   # External Secrets Operator.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kube_cluster
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.3.0
 platform: ruby
 authors:
 - Nathan K
@@ -219,6 +219,7 @@ files:
 - lib/kube/cluster/standard/cloud_native_pg/database_with_external_secret.rb
 - lib/kube/cluster/standard/cloud_native_pg/external_secret.rb
 - lib/kube/cluster/standard/cloud_native_pg/helm.rb
+- lib/kube/cluster/standard/cloud_native_pg/postgres_cluster.rb
 - lib/kube/cluster/standard/config_map.rb
 - lib/kube/cluster/standard/cron_job.rb
 - lib/kube/cluster/standard/cron_job_with_service_account.rb