apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: postgres-cluster
  namespace: postgres
spec:
  instances: 3

  storage:
    size: 10Gi

  certificates:
    serverTLSSecret: postgres-ca
    serverCASecret: postgres-ca
    clientCASecret: postgres-server-cert
    replicationTLSSecret: postgres-replication-cert

  # this is here because no `Role` crd exsists yet.
  # see https://github.com/cloudnative-pg/cloudnative-pg/issues/5341
  managed:
    roles:
    - name: authentik
      login: true
      disablePassword: true