feat: deploy decision center on nc01 k8s

config/platform-db/postgres-nc01.yaml

@@ -103,6 +103,16 @@ postgres:
         user: agentrun_v02
         address: 10.42.0.0/16
         method: scram-sha-256
+      - type: hostssl
+        database: decision_center
+        user: decision_center
+        address: 10.42.0.0/16
+        method: scram-sha-256
+      - type: hostssl
+        database: postgres
+        user: decision_center
+        address: 10.42.0.0/16
+        method: scram-sha-256
 
 secrets:
   source: master-local
@@ -122,6 +132,20 @@ secrets:
           AGENTRUN_NC01_V02_DB_NAME: agentrun_v02
         randomHex:
           AGENTRUN_NC01_V02_DB_PASSWORD: 32
+    - name: decision-center-nc01-db-credentials
+      sourceRef: decision-center/nc01-db.env
+      type: env
+      requiredKeys:
+        - DECISION_CENTER_NC01_DB_USER
+        - DECISION_CENTER_NC01_DB_PASSWORD
+        - DECISION_CENTER_NC01_DB_NAME
+      createIfMissing:
+        enabled: true
+        values:
+          DECISION_CENTER_NC01_DB_USER: decision_center
+          DECISION_CENTER_NC01_DB_NAME: decision_center
+        randomHex:
+          DECISION_CENTER_NC01_DB_PASSWORD: 32
 
 objects:
   roles:
@@ -134,12 +158,26 @@ objects:
         createdb: false
         createrole: false
         superuser: false
+    - name: decision_center
+      passwordRef:
+        sourceRef: decision-center/nc01-db.env
+        key: DECISION_CENTER_NC01_DB_PASSWORD
+      login: true
+      attributes:
+        createdb: false
+        createrole: false
+        superuser: false
   databases:
     - name: agentrun_v02
       owner: agentrun_v02
       encoding: UTF8
       locale: C.UTF-8
       extensions: []
+    - name: decision_center
+      owner: decision_center
+      encoding: UTF8
+      locale: C.UTF-8
+      extensions: []
 
 exports:
   connectionStrings:
@@ -158,6 +196,21 @@ exports:
         - scope: agentrun-v02
           secret: agentrun-v02-mgr-db
           key: DATABASE_URL
+    - name: decision-center-nc01-database-url
+      sourceSecretRef: decision-center/nc01-db.env
+      render:
+        envKey: DATABASE_URL
+        format: postgresql://$(DECISION_CENTER_NC01_DB_USER):$(DECISION_CENTER_NC01_DB_PASSWORD)@$(PGHOST):5432/$(DECISION_CENTER_NC01_DB_NAME)?sslmode=require&uselibpqcompat=true
+        variables:
+          PGHOST: 10.42.0.1
+      writeToSecretSource:
+        sourceRef: decision-center/nc01-db.env
+        key: DATABASE_URL
+        mode: update-or-insert
+      consumers:
+        - scope: decision-center
+          secret: decision-center-runtime-secrets
+          key: DATABASE_URL
 
 backup:
   logicalDump: