apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: pg-authentik
  namespace: authentik
spec:
  imageName: ghcr.io/cloudnative-pg/postgresql:16
  instances: 2

  # Resource limits to prevent OOM
  resources:
    requests:
      memory: "512Mi"
      cpu: "25m"
    limits:
      memory: "2Gi"
      cpu: "250m"

  # Spread replicas across different nodes  
  affinity:
    topologyKey: kubernetes.io/hostname

  storage:
    size: 5Gi
    storageClass: rook-ceph-block

  primaryUpdateStrategy: unsupervised
  
  # PostgreSQL configuration for better performance
  postgresql:
    parameters:
      max_connections: "200"
      shared_buffers: "512MB"
      effective_cache_size: "1536MB"
      maintenance_work_mem: "128MB"
      checkpoint_completion_target: "0.9"
      wal_buffers: "16MB"
      default_statistics_target: "100"
      random_page_cost: "1.1"
      effective_io_concurrency: "200"
      work_mem: "2621kB"
      min_wal_size: "1GB"
      max_wal_size: "4GB"

  bootstrap:
    initdb:
      database: app
      owner: app

  monitoring:
    enablePodMonitor: true