make schema and sslmode configurable

hosting/k8s/helm/templates/_helpers.tpl

@@ -96,13 +96,13 @@ Get the full image name for supervisor
 {{- end }}
 
 {{/*
-PostgreSQL connection string for internal PostgreSQL
+PostgreSQL connection string
 */}}
 {{- define "trigger-v4.postgres.connectionString" -}}
 {{- if .Values.postgres.external -}}
-postgresql://{{ .Values.postgres.externalConnection.username }}:{{ .Values.postgres.externalConnection.password }}@{{ .Values.postgres.externalConnection.host }}:{{ .Values.postgres.externalConnection.port }}/{{ .Values.postgres.externalConnection.database }}?schema=public&sslmode=disable
+postgresql://{{ .Values.postgres.externalConnection.username }}:{{ .Values.postgres.externalConnection.password }}@{{ .Values.postgres.externalConnection.host }}:{{ .Values.postgres.externalConnection.port }}/{{ .Values.postgres.externalConnection.database }}?schema={{ .Values.postgres.externalConnection.schema | default "public" }}&sslmode={{ .Values.postgres.externalConnection.sslMode | default "prefer" }}
 {{- else -}}
-postgresql://{{ .Values.postgres.auth.username }}:{{ .Values.postgres.auth.password }}@{{ include "trigger-v4.fullname" . }}-postgres:{{ .Values.postgres.primary.service.ports.postgres }}/{{ .Values.postgres.auth.database }}?schema=public&sslmode=disable
+postgresql://{{ .Values.postgres.auth.username }}:{{ .Values.postgres.auth.password }}@{{ include "trigger-v4.fullname" . }}-postgres:{{ .Values.postgres.primary.service.ports.postgres }}/{{ .Values.postgres.auth.database }}?schema={{ .Values.postgres.connection.schema | default "public" }}&sslmode={{ .Values.postgres.connection.sslMode | default "prefer" }}
 {{- end -}}
 {{- end }}
 

hosting/k8s/helm/values-production-example.yaml

@@ -131,6 +131,8 @@ supervisor:
 #     database: "trigger"
 #     username: "trigger_user"
 #     password: "your-db-password"
+#     schema: "public"
+#     sslMode: "require"  # Use 'require' or 'verify-full' for production
 
 # Example: Use external Redis instead
 # redis:

hosting/k8s/helm/values.yaml

@@ -269,6 +269,9 @@ postgres:
     username: "postgres"
     password: "postgres"
     database: "main"
+  connection:
+    schema: "public"
+    sslMode: "disable" # Use "require" or "verify-full" for production
 
   podAnnotations: {}
 
@@ -296,6 +299,9 @@ postgres:
     database: ""
     username: ""
     password: ""
+    # Connection options
+    schema: "public"
+    sslMode: "require" # Options: disable, allow, prefer, require, verify-ca, verify-full
   # Extra environment variables for PostgreSQL
   extraEnv:
     []