From f8adba6df3df8ffb6dd7e94594b77c135634783c Mon Sep 17 00:00:00 2001
From: David Kirwan <davidkirwanirl@gmail.com>
Date: Mon, 31 Mar 2025 10:42:29 +0100
Subject: [PATCH] forgejo: add postgresql operator config, secret

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
---
 .../forgejo/templates/postgres-cluster.yaml.j2         |  6 ++++++
 .../forgejo/templates/postgres-secret.yaml.j2          | 10 ++++++++++
 2 files changed, 16 insertions(+)
 create mode 100644 roles/openshift-apps/forgejo/templates/postgres-secret.yaml.j2

diff --git a/roles/openshift-apps/forgejo/templates/postgres-cluster.yaml.j2 b/roles/openshift-apps/forgejo/templates/postgres-cluster.yaml.j2
index b536c38c96..740fda9d64 100644
--- a/roles/openshift-apps/forgejo/templates/postgres-cluster.yaml.j2
+++ b/roles/openshift-apps/forgejo/templates/postgres-cluster.yaml.j2
@@ -4,6 +4,12 @@ metadata:
   name: forgejo-ha
   namespace: forgejo
 spec:
+  spec:
+  users:
+    - name: gitea
+      databases:
+        - gitea
+      options: 'SUPERUSER'
   postgresVersion: 17
   instances:
     - name: forgejo-ha
diff --git a/roles/openshift-apps/forgejo/templates/postgres-secret.yaml.j2 b/roles/openshift-apps/forgejo/templates/postgres-secret.yaml.j2
new file mode 100644
index 0000000000..23a658a423
--- /dev/null
+++ b/roles/openshift-apps/forgejo/templates/postgres-secret.yaml.j2
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: hippo-pguser-rhino
+  namespace: forgejo
+  labels:
+    postgres-operator.crunchydata.com/cluster: forgejo-ha
+    postgres-operator.crunchydata.com/pguser: gitea
+stringData:
+  password: "{{ (env == 'production') | ternary(forgejo_postgresql_password, forgejo_stg_postgresql_password) }}"