infra

deployment/app/deployment.yaml

@@ -13,7 +13,7 @@ spec:
     spec:
       containers:
       - name: craig
-        image: 992382534381.dkr.ecr.us-east-1.amazonaws.com/cs-prod-craig-bot:22d746a
+        image: 992382534381.dkr.ecr.us-east-1.amazonaws.com/cs-prod-craig-bot:e4f5133
         resources:
           limits:
             cpu: 2

deployment/app/externalsecret.yaml

@@ -28,3 +28,25 @@ spec:
       remoteRef:
         key: craig_secrets
         property: CLIENT_SECRET
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: craig-secrets
+spec:
+  refreshInterval: 1m
+  secretStoreRef:
+    name: default
+    kind: ClusterSecretStore
+  target:
+    name: postgresql-secrets
+    creationPolicy: Owner
+  data:
+    - secretKey: pg-admin-password
+      remoteRef:
+        key: craig_secrets
+        property: pg-admin-password
+    - secretKey: pg-user-password
+      remoteRef:
+        key: craig_secrets
+        property: pg-user-password

deployment/argocd/app.yaml

@@ -8,10 +8,21 @@ spec:
     name: cs-prod-us-east-1
     namespace: craig-bot
   project: apps-cs-prod
-  source:
-    repoURL: https://github.com/ConsenSys/w3f-craig.git
-    path: deployment/app
-    targetRevision: master
+  sources:
+    - repoURL: https://github.com/ConsenSys/w3f-craig.git
+      path: deployment/app
+      targetRevision: master
+    - chart: postgresql
+      repoURL: registry-1.docker.io/bitnamicharts
+      targetRevision: 16.3.5
+      helm:
+        values:  |
+          auth:
+            existingSecret: craig-secrets
+            database: craig
+            username: craig
+            adminPasswordKey: pg-admin-password
+            userPasswordKey: pg-user-password
   syncPolicy:
     automated:
       prune: true