From 1b23fe01c090f98c06a0dfa887eeb46b21c94d92 Mon Sep 17 00:00:00 2001
From: Haitao Pan <manbuzhe2009@qq.com>
Date: Thu, 2 Apr 2026 18:44:42 +0800
Subject: [PATCH] fix(gitops): align postgresql stunnel client with compose
 runtime

---
 databases/postgresql/kustomization.yaml       |  2 ++
 .../postgresql/stunnel-client-deployment.yaml | 30 +++++++++++++++++++
 .../postgresql/stunnel-client-service.yaml    | 12 ++++++++
 databases/postgresql/values.yaml              |  2 +-
 4 files changed, 45 insertions(+), 1 deletion(-)
 create mode 100644 databases/postgresql/stunnel-client-deployment.yaml
 create mode 100644 databases/postgresql/stunnel-client-service.yaml

diff --git a/databases/postgresql/kustomization.yaml b/databases/postgresql/kustomization.yaml
index eed9383..e1833ef 100644
--- a/databases/postgresql/kustomization.yaml
+++ b/databases/postgresql/kustomization.yaml
@@ -9,6 +9,8 @@ resources:
   - stunnel-server-configmap.yaml
   - stunnel-server-deployment.yaml
   - stunnel-server-service.yaml
+  - stunnel-client-deployment.yaml
+  - stunnel-client-service.yaml
 configMapGenerator:
   - name: postgresql-values
     files:
diff --git a/databases/postgresql/stunnel-client-deployment.yaml b/databases/postgresql/stunnel-client-deployment.yaml
new file mode 100644
index 0000000..bb074ba
--- /dev/null
+++ b/databases/postgresql/stunnel-client-deployment.yaml
@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: postgresql-stunnel-client
+  namespace: database
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: postgresql-stunnel-client
+  template:
+    metadata:
+      labels:
+        app: postgresql-stunnel-client
+    spec:
+      containers:
+        - name: stunnel-client
+          image: dweomer/stunnel:latest
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: STUNNEL_SERVICE
+              value: postgres-client
+            - name: STUNNEL_ACCEPT
+              value: "15432"
+            - name: STUNNEL_CONNECT
+              value: postgresql-stunnel-server.database.svc.cluster.local:5433
+            - name: STUNNEL_CRONTAB
+              value: ""
+          ports:
+            - containerPort: 15432
diff --git a/databases/postgresql/stunnel-client-service.yaml b/databases/postgresql/stunnel-client-service.yaml
new file mode 100644
index 0000000..f9f97cf
--- /dev/null
+++ b/databases/postgresql/stunnel-client-service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgresql-stunnel-client
+  namespace: database
+spec:
+  selector:
+    app: postgresql-stunnel-client
+  ports:
+    - name: postgres
+      port: 15432
+      targetPort: 15432
diff --git a/databases/postgresql/values.yaml b/databases/postgresql/values.yaml
index f5b2218..26405e3 100644
--- a/databases/postgresql/values.yaml
+++ b/databases/postgresql/values.yaml
@@ -49,7 +49,7 @@ stunnel:
   enabled: false
 
 stunnelClient:
-  enabled: true
+  enabled: false
   image:
     repository: ghcr.io/x-evor/postgresql.svc.plus/stunnel-client
     tag: latest