From aa9670213082e57ebbb3cdce1e52045d82aab0c3 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Thu, 22 Jan 2026 19:55:19 -0800
Subject: [PATCH] Grant teslamate user superuser for extension management

TeslaMate migrations need to create/drop PostgreSQL extensions
(cube, earthdistance) which requires superuser privileges.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 argocd/manifests/databases/blumeops-pg.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/argocd/manifests/databases/blumeops-pg.yaml b/argocd/manifests/databases/blumeops-pg.yaml
index f217172..84d5db0 100644
--- a/argocd/manifests/databases/blumeops-pg.yaml
+++ b/argocd/manifests/databases/blumeops-pg.yaml
@@ -44,8 +44,10 @@ spec:
         passwordSecret:
           name: blumeops-pg-borgmatic
       # teslamate user for TeslaMate Tesla data logger
+      # Note: superuser required for extension management during migrations
       - name: teslamate
         login: true
+        superuser: true
         connectionLimit: -1
         ensure: present
         inherit: true