From 8cac765a6427c829fb24470bf62247ade97b1a6f Mon Sep 17 00:00:00 2001
From: CTO Agent <cto@basicstack.de>
Date: Sun, 26 Jul 2026 10:03:33 +0000
Subject: [PATCH] Use existing encrypted PVCs and postgres deployment

- Change paperclip deployment to use paperclip-data-encrypted PVC (preserves existing data)
- Remove pvc.yaml (use existing PVC instead of creating new one)
- Remove postgres StatefulSet and service (use existing postgres deployment)

This preserves the existing 43-day-old data in the encrypted volumes instead of creating a fresh deployment.

Resolves: DEV-387

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 apps/paperclip/deployment.yaml           |  2 +-
 apps/paperclip/postgres-service.yaml     | 14 -----
 apps/paperclip/postgres-statefulset.yaml | 80 ------------------------
 apps/paperclip/pvc.yaml                  | 16 -----
 4 files changed, 1 insertion(+), 111 deletions(-)
 delete mode 100644 apps/paperclip/postgres-service.yaml
 delete mode 100644 apps/paperclip/postgres-statefulset.yaml
 delete mode 100644 apps/paperclip/pvc.yaml

diff --git a/apps/paperclip/deployment.yaml b/apps/paperclip/deployment.yaml
index 36416d0..afbdc64 100644
--- a/apps/paperclip/deployment.yaml
+++ b/apps/paperclip/deployment.yaml
@@ -111,4 +111,4 @@ spec:
       volumes:
       - name: data
         persistentVolumeClaim:
-          claimName: paperclip-data
+          claimName: paperclip-data-encrypted
diff --git a/apps/paperclip/postgres-service.yaml b/apps/paperclip/postgres-service.yaml
deleted file mode 100644
index 1c7f828..0000000
--- a/apps/paperclip/postgres-service.yaml
+++ /dev/null
@@ -1,14 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: paperclip-postgres
-  namespace: paperclip
-spec:
-  type: ClusterIP
-  selector:
-    app: paperclip-postgres
-  ports:
-  - name: postgres
-    port: 5432
-    targetPort: 5432
-    protocol: TCP
diff --git a/apps/paperclip/postgres-statefulset.yaml b/apps/paperclip/postgres-statefulset.yaml
deleted file mode 100644
index d8f4b7a..0000000
--- a/apps/paperclip/postgres-statefulset.yaml
+++ /dev/null
@@ -1,80 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: paperclip-postgres
-  namespace: paperclip
-spec:
-  serviceName: paperclip-postgres
-  replicas: 1
-  selector:
-    matchLabels:
-      app: paperclip-postgres
-  template:
-    metadata:
-      labels:
-        app: paperclip-postgres
-    spec:
-      containers:
-      - name: postgres
-        image: postgres:16-alpine
-        imagePullPolicy: IfNotPresent
-        ports:
-        - name: postgres
-          containerPort: 5432
-          protocol: TCP
-        env:
-        - name: POSTGRES_DB
-          value: paperclip
-        - name: POSTGRES_USER
-          value: paperclip
-        - name: POSTGRES_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: paperclip-secrets
-              key: POSTGRES_PASSWORD
-        resources:
-          requests:
-            cpu: 250m
-            memory: 512Mi
-          limits:
-            cpu: 1000m
-            memory: 2Gi
-        volumeMounts:
-        - name: postgres-data
-          mountPath: /var/lib/postgresql/data
-          subPath: pgdata
-        livenessProbe:
-          exec:
-            command:
-            - /bin/sh
-            - -c
-            - pg_isready -U paperclip
-          initialDelaySeconds: 30
-          periodSeconds: 10
-          timeoutSeconds: 5
-          successThreshold: 1
-          failureThreshold: 3
-        readinessProbe:
-          exec:
-            command:
-            - /bin/sh
-            - -c
-            - pg_isready -U paperclip
-          initialDelaySeconds: 5
-          periodSeconds: 5
-          timeoutSeconds: 3
-          successThreshold: 1
-          failureThreshold: 3
-  volumeClaimTemplates:
-  - metadata:
-      name: postgres-data
-      annotations:
-        # Prevent Argo CD from deleting this PVC to avoid data loss
-        argocd.argoproj.io/sync-options: Delete=false
-    spec:
-      accessModes:
-      - ReadWriteOnce
-      storageClassName: local-path
-      resources:
-        requests:
-          storage: 20Gi
diff --git a/apps/paperclip/pvc.yaml b/apps/paperclip/pvc.yaml
deleted file mode 100644
index b133594..0000000
--- a/apps/paperclip/pvc.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: paperclip-data
-  namespace: paperclip
-  annotations:
-    # Prevent Argo CD from deleting this PVC to avoid data loss
-    argocd.argoproj.io/sync-options: Delete=false
-spec:
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 50Gi
-  storageClassName: local-path
-  volumeMode: Filesystem