Reconcile `Role` resources with a non-superuser admin such as the master user of managed PostgreSQL cloud services - #71

Merged

ThoSap merged 12 commits into

mainfrom

fix-role-reconcile-without-pg-authid-access

Oct 5, 2026

Commits on Sep 11, 2026

generate jOOQ sources for `pg_roles`
ThoSap
committed
0ad61c4
reconcile `Role` resources with a non-superuser admin such as the master user of managed PostgreSQL cloud services
ThoSap
committed
062610a
document admin privileges, password handling, and non-superuser limits
ThoSap
committed
3092173
keep the cause of a failed password fingerprint key load in the `Role` status
ThoSap
committed
fe0ad29
record the password fingerprint in the `Role` status only after the database commit
ThoSap
committed
15cdd8f
grant `create` on Secrets through a namespaced Role in the operator namespace
ThoSap
committed
312dc94
test superuser-only flags and password modes with a non-superuser admin
ThoSap
committed
70ec3a9
clear the password of a `NOLOGIN` role that still holds one
ThoSap
committed
3163512
document the threat model of the `Role` password fingerprint
ThoSap
committed
65a77d1

Commits on Oct 5, 2026