feat(vaultwarden): provision new DB

coder/resources/db/user.yaml

@@ -8,5 +8,5 @@ spec:
   database: coder
   secretName: coder-db-credentials
   privileges: OWNER
-  secretTemplate:       # Output secrets can be customized using standard Go templates
+  secretTemplate:
     PQ_URL: "postgresql://{{.Role}}:{{.Password}}@{{.Host}}:5432/{{.Database}}?sslmode=require&search_path=coder"

vaultwarden/kustomization.yaml

@@ -16,6 +16,8 @@ images:
 
 resources:
   - "resources/namespace.yaml"
+  - "resources/db/db.yaml"
+  - "resources/db/user.yaml"
   - "resources/pvc.yaml"
   - "resources/deployment.yaml"
   - "resources/service.yaml"

vaultwarden/resources/db/db.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: db.movetokube.com/v1alpha1
+kind: Postgres
+metadata:
+  name: vaultwarden
+spec:
+  database: vaultwarden
+  dropOnDelete: false

vaultwarden/resources/db/user.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: db.movetokube.com/v1alpha1
+kind: PostgresUser
+metadata:
+  name: vaultwarden
+spec:
+  role: vaultwarden
+  database: vaultwarden
+  secretName: vaultwarden-db-credentials
+  privileges: OWNER
+  secretTemplate:
+    PQ_URL: "postgresql://{{.Role}}:{{.Password}}@app-cluster-pooler-rw.postgres.svc:5432/{{.Database}}?sslmode=require"