docs(database): use templated postgresql ingress domain

This commit is contained in:
Haitao Pan 2026-04-04 08:04:46 +08:00
parent 704811c14a
commit d475d0aba6

View File

@ -21,6 +21,6 @@ directory. Otherwise the ExternalSecrets controller will report
Use `scripts/seed-vault-postgresql.sh` from a trusted admin shell to write the
expected Vault keys from local environment variables or existing K8s Secrets.
The shared TLS Secret for `postgresql-tls.svc.plus` is synchronized by the
The ingress domain is `postgresql-<node-or-cluster>.svc.plus`. The shared TLS Secret for `postgresql-tls` is synchronized by the
`k3s-platform` Helm chart into `database/postgresql-tls`, which
`stunnel-server` consumes directly. Do not commit the secret values to Git.