apiVersion: v1
kind: Namespace
metadata:
  name: postgresql-tenant-operator-e2e
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: openbao
  namespace: postgresql-tenant-operator-e2e
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: postgresql-tenant-operator-e2e-openbao-token-reviewer
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:auth-delegator
subjects:
  - kind: ServiceAccount
    name: openbao
    namespace: postgresql-tenant-operator-e2e
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: postgres
  namespace: postgresql-tenant-operator-e2e
spec:
  replicas: 1
  selector:
    matchLabels: {app: postgres}
  template:
    metadata:
      labels: {app: postgres}
    spec:
      containers:
        - name: postgres
          image: postgres:17-alpine
          env:
            - {name: POSTGRES_USER, value: postgres}
            - {name: POSTGRES_PASSWORD, value: postgres-e2e-only}
          ports:
            - {name: postgresql, containerPort: 5432}
          readinessProbe:
            exec: {command: [pg_isready, -U, postgres]}
            initialDelaySeconds: 2
            periodSeconds: 2
---
apiVersion: v1
kind: Service
metadata:
  name: postgres
  namespace: postgresql-tenant-operator-e2e
spec:
  selector: {app: postgres}
  ports:
    - {name: postgresql, port: 5432, targetPort: postgresql}
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: openbao
  namespace: postgresql-tenant-operator-e2e
spec:
  replicas: 1
  selector:
    matchLabels: {app: openbao}
  template:
    metadata:
      labels: {app: openbao}
    spec:
      serviceAccountName: openbao
      containers:
        - name: openbao
          image: openbao/openbao:2.6.1
          args: [server, -dev]
          env:
            - {name: BAO_DEV_LISTEN_ADDRESS, value: "0.0.0.0:8200"}
            - {name: BAO_DEV_ROOT_TOKEN_ID, value: dev-only-root-token}
            - {name: BAO_ADDR, value: "http://127.0.0.1:8200"}
          ports:
            - {name: http, containerPort: 8200}
          readinessProbe:
            exec: {command: [bao, status]}
            initialDelaySeconds: 2
            periodSeconds: 2
---
apiVersion: v1
kind: Service
metadata:
  name: openbao
  namespace: postgresql-tenant-operator-e2e
spec:
  selector: {app: openbao}
  ports:
    - {name: http, port: 8200, targetPort: http}