From 597a4dfe905bba6bfab3dee75a15a5c871c93cff Mon Sep 17 00:00:00 2001
From: Zoe Roux <zoe.roux@zoriya.dev>
Date: Sun, 13 Jul 2025 14:35:35 +0200
Subject: [PATCH] Create `authentik` pg user

---
 apps/postgres.yaml | 19 ++++++++++++++++---
 1 file changed, 16 insertions(+), 3 deletions(-)

diff --git a/apps/postgres.yaml b/apps/postgres.yaml
index c32ee86..2a9a514 100644
--- a/apps/postgres.yaml
+++ b/apps/postgres.yaml
@@ -1,18 +1,18 @@
 kind: Namespace
 apiVersion: v1
 metadata:
-  name: postgres
+  name: cnpg
 ---
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: postgres
+  name: cnpg
   namespace: argocd
 spec:
   project: default
   destination:
     server: https://kubernetes.default.svc
-    namespace: postgres
+    namespace: cnpg
   syncPolicy:
     automated:
       prune: true
@@ -27,6 +27,11 @@ spec:
     helm:
       valuesObject: {}
 ---
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: postgres
+---
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -37,3 +42,11 @@ spec:
 
   storage:
     size: 10Gi
+
+  # this is here because no `Role` crd exsists yet.
+  # see https://github.com/cloudnative-pg/cloudnative-pg/issues/5341
+  managed:
+    roles:
+    - name: authentik
+      login: true
+      disablePassword: true