apiVersion: postgresql.cnpg.io/v1
kind: DatabaseRole
metadata:
  name: platform-postgres-keycloak
  labels:
    app.kubernetes.io/name: keycloak
    app.kubernetes.io/component: database-role
spec:
  cluster:
    name: platform-postgres
  name: keycloak
  comment: Keycloak identity provider database owner
  login: true
  superuser: false
  createdb: false
  createrole: false
  replication: false
  bypassrls: false
  connectionLimit: 50
  passwordSecret:
    name: keycloak-db-credentials
  databaseRoleReclaimPolicy: retain