Add Automation Orchestrator Install and setup

roles/cloudnativepg_operator/defaults/main.yml

@@ -0,0 +1,50 @@
+---
+# --- OLM subscription ---
+# CloudNativePG is in the certified-operators catalog by default (no custom
+# CatalogSource needed, unlike automation_orchestrator_operator).
+cloudnativepg_operator_operator_namespace: cloudnative-pg
+cloudnativepg_operator_channel: stable-v1
+cloudnativepg_operator_name: cloudnative-pg
+cloudnativepg_operator_catalog_source: certified-operators
+cloudnativepg_operator_wait_timeout: 600
+
+# --- Cluster CR ---
+# Namespace for the Cluster, credential Secrets, and Database CRs. Defaults to
+# the automation_orchestrator_operator app namespace — keep the two in sync if overridden.
+cloudnativepg_operator_cluster_namespace: automation-orchestrator
+cloudnativepg_operator_cluster_name: orchestrator-postgres
+cloudnativepg_operator_owner_user: orchestrator
+cloudnativepg_operator_instances: 1
+cloudnativepg_operator_image_name: ghcr.io/cloudnative-pg/postgresql:15
+cloudnativepg_operator_storage_size: 5Gi
+cloudnativepg_operator_storage_class: ""
+cloudnativepg_operator_max_connections: 200
+
+# --- Databases (Database CRs, all owned by cloudnativepg_operator_owner_user) ---
+cloudnativepg_operator_databases:
+  - name: orchestrator
+    dbname: orchestrator
+  - name: temporal
+    dbname: temporal
+  - name: temporal-visibility
+    dbname: temporal_visibility
+
+# --- Credential secrets (type kubernetes.io/basic-auth) ---
+# All share the same generated username/password; only the referenced database differs.
+# secrets[0] is used as the CNPG bootstrap.initdb secret (creates the owner role + first DB).
+cloudnativepg_operator_secrets:
+  - name: orchestrator-postgres-secret
+    database: orchestrator
+  - name: temporal-postgres-secret
+    database: temporal
+  - name: temporal-visibility-postgres-secret
+    database: temporal_visibility
+
+# --- Vault ---
+# KV2 path/key where the generated postgres password is stored and retrieved.
+cloudnativepg_operator_vault_mount: kv
+cloudnativepg_operator_vault_path: cloudnativepg/orchestrator-postgres
+
+# --- Debugging ---
+# Set to false to disable no_log and expose secret values in task output.
+cloudnativepg_operator_no_log: true