grant db owners to cron_admin

charts/postgres-operator/crds/operatorconfigurations.yaml

@@ -130,6 +130,8 @@ spec:
               users:
                 type: object
                 properties:
+                  cron_admin_username:
+                     type: string
                   enable_password_rotation:
                     type: boolean
                     default: false

charts/postgres-operator/values.yaml

@@ -59,6 +59,14 @@ configGeneral:
 
 # parameters describing Postgres users
 configUsers:
+  # username used to grant rights to set up and maintain cron jobs to database owners
+  cron_admin_username: cron_admin
+  # enable password rotation for app users that are not database owners
+  enable_password_rotation: false
+  # rotation interval for updating credentials in K8s secrets of app users
+  password_rotation_interval: 90
+  # retention interval to keep rotation users
+  password_rotation_user_retention: 180
   # postgres username used for replication between instances
   replication_username: standby
   # postgres superuser name to be created by initdb