---
# --- OLM subscription ---
# CloudNativePG is in the certified-operators catalog by default (no custom
# CatalogSource needed, unlike automation_orchestrator_operator).
cloudnativepg_operator_operator_namespace: cloudnative-pg
cloudnativepg_operator_channel: stable-v1
cloudnativepg_operator_name: cloudnative-pg
cloudnativepg_operator_catalog_source: certified-operators
cloudnativepg_operator_wait_timeout: 600

# --- Cluster CR ---
# Namespace for the Cluster, credential Secrets, and Database CRs. Defaults to
# the automation_orchestrator_operator app namespace — keep the two in sync if overridden.
cloudnativepg_operator_cluster_namespace: automation-orchestrator
cloudnativepg_operator_cluster_name: orchestrator-postgres
cloudnativepg_operator_owner_user: orchestrator
cloudnativepg_operator_instances: 1
# A primary PDB on a single instance is permanently at its limit (PodDisruptionBudgetAtLimit)
# and blocks node drains; CNPG recommends disabling it for single-instance dev clusters.
cloudnativepg_operator_enable_pdb: "{{ cloudnativepg_operator_instances | int > 1 }}"
cloudnativepg_operator_image_name: ghcr.io/cloudnative-pg/postgresql:15
cloudnativepg_operator_storage_size: 5Gi
cloudnativepg_operator_storage_class: ""
cloudnativepg_operator_max_connections: 200

# --- Databases (Database CRs, all owned by cloudnativepg_operator_owner_user) ---
cloudnativepg_operator_databases:
  - name: orchestrator
    dbname: orchestrator
  - name: temporal
    dbname: temporal
  - name: temporal-visibility
    dbname: temporal_visibility

# --- Credential secrets (type kubernetes.io/basic-auth) ---
# All share the same generated username/password; only the referenced database differs.
# secrets[0] is used as the CNPG bootstrap.initdb secret (creates the owner role + first DB).
cloudnativepg_operator_secrets:
  - name: orchestrator-postgres-secret
    database: orchestrator
  - name: temporal-postgres-secret
    database: temporal
  - name: temporal-visibility-postgres-secret
    database: temporal_visibility

# --- Vault ---
# KV2 path/key where the generated postgres password is stored and retrieved.
cloudnativepg_operator_vault_mount: kv
cloudnativepg_operator_vault_path: cloudnativepg/orchestrator-postgres

# --- Debugging ---
# Set to false to disable no_log and expose secret values in task output.
cloudnativepg_operator_no_log: true