# 2026-03-18 — debug pod для проверки psql-соединения из namespace функций.
# Запускается разово. Подключается к тому же postgres, что и sless_function.
# kubectl apply -f /tmp/pg-debug-pod.yaml
# kubectl logs -n sless-fn-sless-ffd1f598c169b0ae pg-debug-pod

apiVersion: v1
kind: Pod
metadata:
  name: pg-debug-pod
  namespace: sless-fn-sless-ffd1f598c169b0ae
  labels:
    purpose: debug-postgres-connectivity
spec:
  restartPolicy: Never
  containers:
  - name: psql
    image: postgres:17-alpine
    command:
      - sh
      - -c
      - |
        echo "=== Testing TCP connectivity to postgres ==="
        nc -zv -w5 $PGHOST 5432 && echo "TCP OK" || echo "TCP FAILED"

        echo ""
        echo "=== Testing psql connection ==="
        PGCONNECT_TIMEOUT=10 psql \
          "host=$PGHOST port=$PGPORT dbname=$PGDATABASE user=$PGUSER sslmode=$PGSSLMODE" \
          --command="SELECT current_user, current_database(), version();" \
          2>&1

        echo ""
        echo "=== Listing tables ==="
        PGCONNECT_TIMEOUT=10 psql \
          "host=$PGHOST port=$PGPORT dbname=$PGDATABASE user=$PGUSER sslmode=$PGSSLMODE" \
          --command="\dt" \
          2>&1
    env:
    - name: PGHOST
      value: "postgresqlk8s-master.36875359-dcea-48c4-a593-b4531f20fe96.svc.cluster.local"
    - name: PGPORT
      value: "5432"
    - name: PGDATABASE
      value: "db_terra"
    - name: PGUSER
      value: "u-user0"
    - name: PGPASSWORD
      # Актуальный пароль из vault_secrets (совпадает с tfvars.pg_password на 2026-03-18)
      value: "M03O6fRsngWcVHB2YGivyLfbfxoii2R21nyh2A2r7WSZS5deLwBgLKkc9Wk24Zyl"
    - name: PGSSLMODE
      value: "require"