Skip to main content
This page shows how to connect the Metadata Service at an externally managed PostgreSQL.

Values

While inlining postgresql.password also works and the chart wraps it in a Secret, it leaks the password into helm get values and your value file, if used. We strongly recommend to use the existingSecret property.

Install

Create the PostgreSQL credentials Secret in the release namespace, then install the chart:

Verify

Confirm that the bundled PostgreSQL StatefulSet is absent:
Confirm that the Metadata Service connected to the external PostgreSQL:

Caveats

  • TLS to PostgreSQL is not currently exposed. There is no sslmode value or CA-bundle mount.
  • host, database, and schema are pattern-restricted by values.schema.json and XML-escaped at render time. User input cannot break the rendered Metadata Service config.
  • The Metadata Service creates its schema on first connect and migrates the schema in place when pointed at a database from an older Metadata Service version. No manual migration step is required.