secret correction

pgadmin/templates/deploy.yaml

@@ -25,7 +25,7 @@ spec:
               cpu: "1"
             requests:
               memory: "1Mi"
-              cpu: "1m"
+              cpu: "100m"
           volumeMounts:
           - name: data
             mountPath: /var/lib/pgadmin

pgadmin/templates/ingress.yaml

@@ -1,17 +1,39 @@
-apiVersion: extensions/v1beta1
-kind: Ingress
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
 metadata:
-  name: {{ .Release.Name }}
+  name:  {{ .Release.Name }}-internal-tls
   annotations:
-    kubernetes.io/ingress.class: default
+    kubernetes.io/ingress.class: traefik-internal
 spec:
+  entryPoints:
+    - websecure
   tls:
-    - hosts:
-      - {{ required "A valid .Values.host entry required!" .Values.host }}
-  rules:
-  - host: {{ required "A valid .Values.host entry required!" .Values.host }}
-    http:
-      paths:
-      - backend:
-          serviceName: {{ .Release.Name }}
-          servicePort: 80
+    certResolver: myresolver
+    domains:
+    - main: "*.ducoterra.net"
+  routes:
+  - match: Host(`{{ .Release.Name }}.ducoterra.net`)
+    kind: Rule
+    services:
+    - name:  {{ .Release.Name }}
+      port: 80
+
+---
+
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name:  {{ .Release.Name }}-internal-web
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - web
+  routes:
+  - match: Host(`{{ .Release.Name }}.ducoterra.net`)
+    kind: Rule
+    services:
+    - name:  {{ .Release.Name }}
+      port: 80
+    middlewares:
+      - name: httpsredirect

pgadmin/templates/pvc.yaml

@@ -1,11 +1,15 @@
+{{ if .Release.IsInstall }}
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: {{ .Release.Name }}
+  annotations:
+    "helm.sh/resource-policy": keep
 spec:
-  storageClassName: efs-gp
+  storageClassName: nfs-encrypted
   accessModes:
     - ReadWriteMany
   resources:
     requests:
-      storage: 64Gi
+      storage: 8Gi
+{{ end }}

pgadmin/templates/secret.yaml

@@ -1,8 +1,10 @@
-{{ if .Values.secrets }}
+{{ if and .Values.secret .Release.IsInstall }}
 apiVersion: v1
 kind: Secret
 metadata:
-  name: pgadmin
+  name: {{ .Release.Name }}
+  annotations:
+    "helm.sh/resource-policy": keep
 type: generic
 data:
   PGADMIN_DEFAULT_EMAIL: {{ "postgres" | b64enc | quote }}