apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: main
  namespace: postgres
spec:
  inheritedMetadata:
    annotations:
      certificates.quorate.internal/activation: '{"plugin-barman-cloud":"native"}'
  instances: 3
  imageName: zot.quorate.internal/quorate/cnpg-postgresql:18.6@sha256:430d8904b6ab4ebab9c3e188a07dc73fac4e5be9f86b8cf4e50be43b4dacbdc2
  primaryUpdateMethod: switchover
  certificates:
    serverCASecret: main-server-vault
    serverTLSSecret: main-server-vault
  postgresql:
    shared_preload_libraries:
      - timescaledb
    parameters:
      max_connections: "200"
      timescaledb.telemetry_level: "off"
  resources:
    requests:
      cpu: "1"
      memory: "4Gi"
    limits:
      memory: "4Gi"

  plugins:
    - name: barman-cloud.cloudnative-pg.io
      isWALArchiver: true
      parameters:
        barmanObjectName: pg-backup

  managed:
    services:
      # Hide the default ClusterIP ro/r services
      disabledDefaultServices: ["ro", "r"]

      additional:
        - selectorType: rw
          serviceTemplate:
            metadata:
              name: main-rw-lb
              labels:
                io.cilium/bgp-announce: "true"
              annotations:
                lbipam.cilium.io/ips: "10.234.158.153"
            spec:
              type: LoadBalancer
              externalTrafficPolicy: Local

        - selectorType: ro
          serviceTemplate:
            metadata:
              name: main-ro-lb
              labels:
                io.cilium/bgp-announce: "true"
              annotations:
                lbipam.cilium.io/ips: "10.157.251.228"
            spec:
              type: LoadBalancer
              externalTrafficPolicy: Local
  storage:
    storageClass: openebs-hostpath
    size: 50Gi

  affinity:
    enablePodAntiAffinity: true
    topologyKey: kubernetes.io/hostname
    podAntiAffinityType: required