diff --git a/k8s/pg-init/keycloak-db.yaml b/k8s/pg-init/keycloak-db.yaml index a5c8845..fb24876 100644 --- a/k8s/pg-init/keycloak-db.yaml +++ b/k8s/pg-init/keycloak-db.yaml @@ -1,7 +1,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: keycloak-db-init-v2 + name: keycloak-db-init-v3 namespace: pg-init spec: ttlSecondsAfterFinished: 300 @@ -36,6 +36,7 @@ spec: - | psql -c "SELECT 1 FROM pg_roles WHERE rolname='keycloak'" | grep -q 1 || \ psql -c "CREATE USER keycloak WITH PASSWORD '${KC_DB_PASSWORD}';" + psql -c "GRANT keycloak TO pginit;" psql -c "SELECT 1 FROM pg_database WHERE datname='keycloak'" | grep -q 1 || \ psql -c "CREATE DATABASE keycloak OWNER keycloak;" psql -c "GRANT ALL PRIVILEGES ON DATABASE keycloak TO keycloak;" diff --git a/k8s/pg-init/vaultwarden-db.yaml b/k8s/pg-init/vaultwarden-db.yaml index 8aa7ff5..1256123 100644 --- a/k8s/pg-init/vaultwarden-db.yaml +++ b/k8s/pg-init/vaultwarden-db.yaml @@ -1,7 +1,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: vaultwarden-db-init-v2 + name: vaultwarden-db-init-v3 namespace: pg-init spec: ttlSecondsAfterFinished: 300 @@ -36,6 +36,7 @@ spec: - | psql -c "SELECT 1 FROM pg_roles WHERE rolname='vaultwarden'" | grep -q 1 || \ psql -c "CREATE USER vaultwarden WITH PASSWORD '${VW_DB_PASSWORD}';" + psql -c "GRANT vaultwarden TO pginit;" psql -c "SELECT 1 FROM pg_database WHERE datname='vaultwarden'" | grep -q 1 || \ psql -c "CREATE DATABASE vaultwarden OWNER vaultwarden;" psql -c "GRANT ALL PRIVILEGES ON DATABASE vaultwarden TO vaultwarden;"