chore: OVH prod (#619)

.kontinuous/config.yaml

@@ -3,16 +3,5 @@ ciNamespace: ci-secretariat
 
 dependencies:
   fabrique:
-    dependencies:
-      contrib:
-        preDeploy:
-          importSecrets:
-            options:
-              secrets:
-                secretariat-dev-backups-access-key:
-                secretariat-prod-backups-access-key:
     extends:
       - name: ovh
-        ifEnv: [dev, preprod]
-      - name: buildkit-service
-        ifEnv: [dev, preprod]

.kontinuous/env/prod/values.yaml

@@ -24,6 +24,28 @@ hasura:
     enabled: true
     minReplicas: 2
 
+pg:
+  ~chart: pg
+  cnpg-cluster:
+    recovery:
+      enabled: true
+      ~tpl~database: "{{ .Values.global.pgDatabase }}"
+      ~tpl~owner: "{{ .Values.global.pgUser }}"
+      secretName: "pg-db"
+      barmanObjectStore:
+        ~tpl~destinationPath: "s3://secretariat-prod-backups/secretariat"
+        ~tpl~serverName: cnpg-cluster
+        s3Credentials:
+          accessKeyId:
+            ~tpl~name: "secretariat-prod-backups-access-key"
+            key: bucket_access_key
+          secretAccessKey:
+            ~tpl~name: "secretariat-prod-backups-access-key"
+            key: bucket_secret_key
+          region:
+            ~tpl~name: "secretariat-prod-backups-access-key"
+            key: bucket_region
+
 jobs:
   runs:
     build-app:

.kontinuous/values.yaml

@@ -1,3 +1,7 @@
+global:
+  pgDatabase: secretariat
+  pgUser: secretariat
+
 app:
   ~needs: [build-app]
   envFrom:
@@ -9,16 +13,16 @@ app:
   imagePackage: app
 
 hasura:
-  ~needs: [cnpg-cluster, build-hasura]
+  ~needs: [pg, build-hasura]
   envFrom:
     - secretRef:
         name: hasura
     - secretRef:
-        name: cnpg-cluster-app
+        name: pg-app
     - configMapRef:
         name: hasura-configmap
 
-cnpg-cluster:
+pg:
   ~chart: pg
 
 jobs:

.talismanrc

@@ -5,6 +5,8 @@ fileignoreconfig:
   checksum: fae95a0f658c5920845516eb04659cac883418d135a4bce54615236e47da8df1
 - filename: .kontinuous/env/prod/templates/sentry.sealed-secret.yaml
   checksum: ef7c23320a02ca66f8a10755bccabc2a487973e9581a4408ed3f4c8685f921f7
+- filename: .kontinuous/env/prod/values.yaml
+  checksum: 7ae5481f157240a2539f48c96187b0e49af4161041b2a4a542d4693b7b298f35
 - filename: .kontinuous/values.yaml
   checksum: 1d67b52046f6e850ff38f806000aa8bb1329cb1f7e6314fbec89bea2009709e3
 - filename: .yarn/plugins/@yarnpkg/plugin-fetch.cjs