trying to get around SCL Postgres container limitations

kustomize/components/clair/postgres.deployment.yaml

@@ -20,7 +20,6 @@ spec:
             claimName: clair-postgres
       securityContext:
         fsGroup: 0
-        defaultMode: 0740
       containers:
         - name: postgres
           image: postgres:latest

kustomize/components/postgres/create-extensions.sh

@@ -2,4 +2,5 @@
 
 echo "attempting to install required pg_trgm extension"
 
+# FIXME(alecmerdler): Wait until `PG_INITIALIZED` is not false, then run the below command
 psql -d $POSTGRESQL_DATABASE -c 'CREATE EXTENSION pg_trgm;'

kustomize/components/postgres/migrate.job.yaml

@@ -25,6 +25,7 @@ spec:
             - "--format"
             - "c" 
             - "--file" 
+            # FIXME(alecmerdler): Fix this for SCL Postgres container.
             - "/var/lib/postgresql/data/dump.sql"
           volumeMounts:
             - name: postgres-data

kustomize/components/postgres/postgres.deployment.yaml

@@ -21,15 +21,14 @@ spec:
         - name: postgres-bootstrap
           secret:
             secretName: postgres-bootstrap
+            defaultMode: 0777
             items:
               - key: create-extensions.sh
                 path: create-extensions.sh
               - key: restore.sh
                 path: restore.sh
       securityContext:
         fsGroup: 0
-        # FIXME(alecmerdler): This is not being marshaled from octal correctly (probably due to our YAML library) and is turing into `420`
-        defaultMode: 0740
       containers:
         - name: postgres
           image: postgres:latest
@@ -51,5 +50,14 @@ spec:
           volumeMounts:
             - name: postgres-data
               mountPath: /var/lib/pgsql/data
+            # FIXME(alecmerdler): `postgresql-init` does not work because the Quay database hasn't been created yet...
+            # - name: postgres-bootstrap
+            #   mountPath: /opt/app-root/src/postgresql-init
+        # TODO(alecmerdler): Run another container which runs installs the `pg_trgm` extension to the Quay database (since the SCL container does not support post-init hooks...)
+        - name: postgres-extensions
+          image: postgres:latest
+          command: 
+            - /opt/app-root/src/docker-entrypoint-initdb.d/create-extensions.sh
+          volumeMounts:
             - name: postgres-bootstrap
-              mountPath: /opt/app-root/src/postgresql-init
+              mountPath: /opt/app-root/src/docker-entrypoint-initdb.d

kustomize/overlays/downstream/v3.4.0/kustomization.yaml

@@ -16,4 +16,4 @@ images:
     newName: registry.access.redhat.com/rhscl/redis-32-rhel7
   - name: postgres
     newName: registry.access.redhat.com/rhscl/postgresql-10-rhel7
-    newTag: 1-35
+    newTag: latest

kustomize/overlays/downstream/v3.4.0/upgrade/kustomization.yaml

@@ -20,5 +20,4 @@ images:
     newName: registry.access.redhat.com/rhscl/redis-32-rhel7
   - name: postgres
     newName: registry.access.redhat.com/rhscl/postgresql-10-rhel7
-    newTag: 1-35
-  # FIXME(alecmerdler): Need to handle `redhat-pull-secret` (potentially with a `secretGenerator`?)...
+    newTag: latest