Use helm hook to get kubedb ready

Signed-off-by: notTabassum <oyshee@appscode.com>

Author: NotTabassum

charts/ace-installer-certified-crds/README.md

@@ -90,8 +90,9 @@ helm:
       enabled: true
       version: "v2026.6.19"
       values: # +doc-gen:break
-        featureGates:
-          Pgpool: true
+        global:
+          featureGates:
+            Pgpool: true
         kubedb-provisioner:
           enabled: true
         kubedb-catalog:

charts/ace-installer-certified-crds/values.yaml

@@ -90,8 +90,9 @@ helm:
       enabled: true
       version: "v2026.6.19"
       values: # +doc-gen:break
-        featureGates:
-          Pgpool: true
+        global:
+          featureGates:
+            Pgpool: true
         kubedb-provisioner:
           enabled: true
         kubedb-catalog:

charts/ace-installer-certified/README.md

@@ -0,0 +1,115 @@
+{{- if .Values.settings.pgpool.enabled }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "appscode.serviceAccountName" . }}-pgpool-wait
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "ace.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install,post-upgrade
+    "helm.sh/hook-weight": "0"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ include "ace.fullname" . }}-pgpool-wait
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "ace.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install,post-upgrade
+    "helm.sh/hook-weight": "0"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+rules:
+# wait for the Postgres database to become Ready before creating the Pgpool
+- apiGroups:
+  - kubedb.com
+  resources:
+  - postgreses
+  verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "ace.fullname" . }}-pgpool-wait
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "ace.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install,post-upgrade
+    "helm.sh/hook-weight": "0"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ include "ace.fullname" . }}-pgpool-wait
+subjects:
+- kind: ServiceAccount
+  name: {{ include "appscode.serviceAccountName" . }}-pgpool-wait
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ include "ace.fullname" . }}-pgpool-wait
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "ace.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": post-install,post-upgrade
+    "helm.sh/hook-weight": "1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+  activeDeadlineSeconds: 21600
+  backoffLimit: 3
+  template:
+    spec:
+      {{- include "appscode.imagePullSecrets" . | nindent 6 }}
+      serviceAccountName: {{ include "appscode.serviceAccountName" . }}-pgpool-wait
+      automountServiceAccountToken: true
+      {{- if eq "true" ( include "distro.openshift" . ) }}
+      securityContext:
+        {{- toYaml (omit .Values.podSecurityContext "runAsUser" "runAsGroup" "fsGroup" "supplementalGroups") | nindent 8 }}
+      {{- else }}
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
+      {{- end }}
+      containers:
+        - name: kubectl
+          {{- if eq "true" ( include "distro.openshift" . ) }}
+          securityContext:
+            {{- toYaml (omit .Values.securityContext "runAsUser" "runAsGroup" "fsGroup" "supplementalGroups") | nindent 12 }}
+          {{- else }}
+          securityContext:
+            {{- toYaml .Values.securityContext | nindent 12 }}
+          {{- end }}
+          image: "{{ include "kubectl.registry" . }}/{{ .Values.kubectl.repository }}:{{ .Values.kubectl.tag | default .Chart.AppVersion }}"
+          imagePullPolicy: {{ .Values.kubectl.pullPolicy }}
+          command:
+          - /bin/sh
+          - -c
+          - |
+            echo "Waiting for Postgres {{ include "ace.fullname" . }}-db to become Ready..."
+            until [ "$(kubectl get pg {{ include "ace.fullname" . }}-db -n {{ .Release.Namespace }} -o jsonpath='{.status.phase}' 2>/dev/null)" = "Ready" ]; do
+              echo "Postgres {{ include "ace.fullname" . }}-db is not Ready yet. Retrying in 10s..."
+              sleep 10
+            done
+            echo "Postgres {{ include "ace.fullname" . }}-db is Ready. Proceeding to create Pgpool."
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      restartPolicy: Never
+{{- end }}

charts/ace-installer-certified/values.yaml

@@ -6,6 +6,13 @@ metadata:
   namespace: {{ .Release.Namespace }}
   labels:
     {{- include "ace.labels" . | nindent 4 }}
+  annotations:
+    # Create the Pgpool only after the referenced Postgres is Ready. The
+    # pgpool-wait hook (weight 1) blocks until the DB reports phase=Ready, so
+    # this higher-weighted hook runs afterwards.
+    "helm.sh/hook": post-install,post-upgrade
+    "helm.sh/hook-weight": "2"
+    "helm.sh/hook-delete-policy": before-hook-creation
 spec:
   version: "4.6.0"
   replicas: {{ .Values.settings.pgpool.replicas }}