helm deployment with postgre as database

E

Elio•2/15/23, 2:53 PM

Sure

E

Elio•2/15/23, 2:54 PM

Can you share some logs from the setup container?

E

Elio•2/15/23, 2:54 PM

And out of curiosity, how did you deploy postgres? Did you use a Helm chart for that?

E

Elio•2/15/23, 6:28 PM

ok, but you have access to the logs from the zitadel setup pod, right?

E

Elio•2/17/23, 9:04 AM

I'll try to reproduce it.
My first take to try to resolve it will be to delete all cockroachdb config, so I'm sure ZITADEL uses the postgres config.

E

Elio•2/17/23, 1:30 PM

i can't reproduce it with the following config

env:
- name: ZITADEL_DATABASE_POSTGRES_HOST
  value: pg-postgresql
- name: ZITADEL_DATABASE_POSTGRES_PORT
  value: "5432"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
  valueFrom:
    secretKeyRef:
      name: pg-postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_COCKROACH_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
  valueFrom:
    secretKeyRef:
      name: pg-postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
  value: "disable"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE
  value: "disable"
- name: ZITADEL_EXTERNALSECURE
  value: "false"
- name: ZITADEL_TLS_ENABLED
  value: "false"

zitadel:
  dbSslRootCrt:
  dbSslRootCrtSecret:
  dbSslClientCrtSecret:
  masterkey: FOk0NXS1PZlThEaCtribfELN7kCanm2h
  Database:
    cockroach:
      Host: 
      Port: 
      Database: 
      MaxOpenConns: 
      MaxConnLifetime: 
      MaxConnIdleTime: 
      Options: ""
      User:
        Username: 
        Password: 
        SSL:
          Mode: disable
          RootCert: 
          Cert: 
          Key: 
      Admin:
        Username: 
        Password: 
        SSL:
          Mode: disable
          RootCert: 
          Cert: 
          Key:

env:
- name: ZITADEL_DATABASE_POSTGRES_HOST
  value: pg-postgresql
- name: ZITADEL_DATABASE_POSTGRES_PORT
  value: "5432"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
  valueFrom:
    secretKeyRef:
      name: pg-postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_COCKROACH_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
  valueFrom:
    secretKeyRef:
      name: pg-postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
  value: "disable"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE
  value: "disable"
- name: ZITADEL_EXTERNALSECURE
  value: "false"
- name: ZITADEL_TLS_ENABLED
  value: "false"

zitadel:
  dbSslRootCrt:
  dbSslRootCrtSecret:
  dbSslClientCrtSecret:
  masterkey: FOk0NXS1PZlThEaCtribfELN7kCanm2h
  Database:
    cockroach:
      Host: 
      Port: 
      Database: 
      MaxOpenConns: 
      MaxConnLifetime: 
      MaxConnIdleTime: 
      Options: ""
      User:
        Username: 
        Password: 
        SSL:
          Mode: disable
          RootCert: 
          Cert: 
          Key: 
      Admin:
        Username: 
        Password: 
        SSL:
          Mode: disable
          RootCert: 
          Cert: 
          Key:

env:
- name: ZITADEL_DATABASE_POSTGRES_HOST
  value: pg-postgresql
- name: ZITADEL_DATABASE_POSTGRES_PORT
  value: "5432"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
  valueFrom:
    secretKeyRef:
      name: pg-postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_COCKROACH_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
  valueFrom:
    secretKeyRef:
      name: pg-postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
  value: "disable"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE
  value: "disable"
- name: ZITADEL_EXTERNALSECURE
  value: "false"
- name: ZITADEL_TLS_ENABLED
  value: "false"

zitadel:
  dbSslRootCrt:
  dbSslRootCrtSecret:
  dbSslClientCrtSecret:
  masterkey: FOk0NXS1PZlThEaCtribfELN7kCanm2h
  Database:
    cockroach:
      Host: 
      Port: 
      Database: 
      MaxOpenConns: 
      MaxConnLifetime: 
      MaxConnIdleTime: 
      Options: ""
      User:
        Username: 
        Password: 
        SSL:
          Mode: disable
          RootCert: 
          Cert: 
          Key: 
      Admin:
        Username: 
        Password: 
        SSL:
          Mode: disable
          RootCert: 
          Cert: 
          Key:

env:
- name: ZITADEL_DATABASE_POSTGRES_HOST
  value: pg-postgresql
- name: ZITADEL_DATABASE_POSTGRES_PORT
  value: "5432"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
  valueFrom:
    secretKeyRef:
      name: pg-postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_COCKROACH_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
  valueFrom:
    secretKeyRef:
      name: pg-postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
  value: "disable"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE
  value: "disable"
- name: ZITADEL_EXTERNALSECURE
  value: "false"
- name: ZITADEL_TLS_ENABLED
  value: "false"

zitadel:
  dbSslRootCrt:
  dbSslRootCrtSecret:
  dbSslClientCrtSecret:
  masterkey: FOk0NXS1PZlThEaCtribfELN7kCanm2h
  Database:
    cockroach:
      Host: 
      Port: 
      Database: 
      MaxOpenConns: 
      MaxConnLifetime: 
      MaxConnIdleTime: 
      Options: ""
      User:
        Username: 
        Password: 
        SSL:
          Mode: disable
          RootCert: 
          Cert: 
          Key: 
      Admin:
        Username: 
        Password: 
        SSL:
          Mode: disable
          RootCert: 
          Cert: 
          Key:

E

Elio•2/17/23, 1:31 PM

I used the following commands

kind create cluster
helm repo update
helm install postgresql bitnami/postgresql
helm install zitadel --values zitadel_values.yaml zitadel/zitadel

kind create cluster
helm repo update
helm install postgresql bitnami/postgresql
helm install zitadel --values zitadel_values.yaml zitadel/zitadel

kind create cluster
helm repo update
helm install postgresql bitnami/postgresql
helm install zitadel --values zitadel_values.yaml zitadel/zitadel

kind create cluster
helm repo update
helm install postgresql bitnami/postgresql
helm install zitadel --values zitadel_values.yaml zitadel/zitadel

E

Elio•2/17/23, 1:49 PM

yes

E

Elio•2/17/23, 1:49 PM

with the values yaml above

E

Elio•2/17/23, 1:50 PM

generally, I recommend not duplicating config in the values.yaml AND in environment variables

E

Elio•2/17/23, 1:51 PM

but it worked anyway

E

Elio•2/17/23, 1:53 PM

basically, you can remove the whole zitadel.Database section in the values.yaml

E

Elio•2/17/23, 2:04 PM

and you should also remove the variable ZITADEL_DATABASE_COCKROACH_DATABASE. The following yaml works fine with the commands above:

env:
- name: ZITADEL_DATABASE_POSTGRES_HOST
  value: postgresql
- name: ZITADEL_DATABASE_POSTGRES_PORT
  value: "5432"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
  valueFrom:
    secretKeyRef:
      name: postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
  valueFrom:
    secretKeyRef:
      name: postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
  value: "disable"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE
  value: "disable"
- name: ZITADEL_EXTERNALSECURE
  value: "false"
- name: ZITADEL_TLS_ENABLED
  value: "false"

zitadel:
  dbSslRootCrt:
  dbSslRootCrtSecret:
  dbSslClientCrtSecret:
  masterkey: FOk0NXS1PZlThEaCtribfELN7kCanm2h

env:
- name: ZITADEL_DATABASE_POSTGRES_HOST
  value: postgresql
- name: ZITADEL_DATABASE_POSTGRES_PORT
  value: "5432"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
  valueFrom:
    secretKeyRef:
      name: postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
  valueFrom:
    secretKeyRef:
      name: postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
  value: "disable"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE
  value: "disable"
- name: ZITADEL_EXTERNALSECURE
  value: "false"
- name: ZITADEL_TLS_ENABLED
  value: "false"

zitadel:
  dbSslRootCrt:
  dbSslRootCrtSecret:
  dbSslClientCrtSecret:
  masterkey: FOk0NXS1PZlThEaCtribfELN7kCanm2h

env:
- name: ZITADEL_DATABASE_POSTGRES_HOST
  value: postgresql
- name: ZITADEL_DATABASE_POSTGRES_PORT
  value: "5432"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
  valueFrom:
    secretKeyRef:
      name: postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
  valueFrom:
    secretKeyRef:
      name: postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
  value: "disable"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE
  value: "disable"
- name: ZITADEL_EXTERNALSECURE
  value: "false"
- name: ZITADEL_TLS_ENABLED
  value: "false"

zitadel:
  dbSslRootCrt:
  dbSslRootCrtSecret:
  dbSslClientCrtSecret:
  masterkey: FOk0NXS1PZlThEaCtribfELN7kCanm2h

env:
- name: ZITADEL_DATABASE_POSTGRES_HOST
  value: postgresql
- name: ZITADEL_DATABASE_POSTGRES_PORT
  value: "5432"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
  valueFrom:
    secretKeyRef:
      name: postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_DATABASE
  value: zitadel
- name: ZITADEL_DATABASE_POSTGRES_USER_USERNAME
  value: postgres
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
  valueFrom:
    secretKeyRef:
      name: postgresql
      key: postgres-password
- name: ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE
  value: "disable"
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE
  value: "disable"
- name: ZITADEL_EXTERNALSECURE
  value: "false"
- name: ZITADEL_TLS_ENABLED
  value: "false"

zitadel:
  dbSslRootCrt:
  dbSslRootCrtSecret:
  dbSslClientCrtSecret:
  masterkey: FOk0NXS1PZlThEaCtribfELN7kCanm2h

E

Elio•2/17/23, 5:39 PM

You're right, zitadel init should create the db clappitdb if it doesn't exist already.

E

Elio•2/17/23, 5:41 PM

ah, right, lol

E

Elio•2/17/23, 5:42 PM

you configured the db name zitadel but zitadel tries to connect to clappitdb?

E

Elio•2/17/23, 5:42 PM

or to an empty db which defaults somehow to clappitdb, maybe?

E

Elio•2/17/23, 5:49 PM

i now used your yaml and just replaced the db host. Looks like the database is just not shown in the error messsage.

E

Elio•2/17/23, 5:51 PM

i pointed the host to my postgres

E

Elio•2/17/23, 5:51 PM

and expected a connection failure