apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: postgres-cluster
  namespace: postgres
spec:
  instances: 3

  storage:
    size: 10Gi

  certificates:
    serverCASecret: postgres-server-cert
    serverTLSSecret: postgres-server-cert
    clientCASecret: postgres-server-cert
    replicationTLSSecret: postgres-replication-cert
  postgresql:
    pg_hba:
      - hostssl all all all cert

  backup:
    retentionPolicy: 7d

  # this is here because no `Role` crd exsists yet.
  # see https://github.com/cloudnative-pg/cloudnative-pg/issues/5341
  managed:
    roles:
    - name: authentik
      login: true
      disablePassword: true
    - name: atuin
      login: true
      disablePassword: true