feat: external-dns & cert-manager

postgres-operator/resources/db/default-cluster.yaml

@@ -5,7 +5,6 @@ metadata:
   name: default-cluster
   namespace: postgres
 spec:
-  image: registry.developers.crunchydata.com/crunchydata/crunchy-postgres:ubi8-15.5-0
   postgresVersion: 15
   users:
     - name: postgres
@@ -68,15 +67,24 @@ spec:
 
   backups:
     pgbackrest:
-      image: registry.developers.crunchydata.com/crunchydata/crunchy-pgbackrest:ubi8-2.47-2
+      manual:
+        repoName: repo1
+        options:
+          - --type=full
       configuration:
       - secret:
           name: pgo-s3-creds
       global:
+        repo1-retention-full: "14"
+        repo1-retention-full-type: time
+        repo1-retention-diff: "6"
         repo1-path: /pgbackrest/default-cluster/repo1
         repo1-s3-uri-style: path
       repos:
       - name: repo1
+        schedules:
+          full: "0 1 * * 0"
+          differential: "0 1 * * 1-6"
         s3:
           bucket: backup
           endpoint: 2df513adaee2eeae12106af900bed297.r2.cloudflarestorage.com

postgres-operator/resources/rbac/role_binding.yaml

@@ -11,4 +11,5 @@ roleRef:
   name: postgres-operator
 subjects:
 - kind: ServiceAccount
-  name: pgo
+  name: pgo
+  namespace: postgres-system