apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: authentik-postgres
spec:
  instances: 1
  # Pinned so a new operator default (PostgreSQL 18 since CNPG 1.26.3) can't
  # start an in-place major upgrade. CNPG filled this in at creation.
  imageName: ghcr.io/cloudnative-pg/postgresql:17.11
  primaryUpdateStrategy: unsupervised
  # WAL archiving and base backups to Garage, see postgresql-backup.yaml
  plugins:
    - name: barman-cloud.cloudnative-pg.io
      isWALArchiver: true
      parameters:
        barmanObjectName: authentik-postgres
  resources:
    requests:
      cpu: 50m
      memory: 256Mi
  bootstrap:
    initdb:
      database: authentik
      owner: authentik
      secret:
        name: authentik-postgres-credentials
  storage:
    storageClass: longhorn
    size: 8Gi