One more note. I didn't find the instructions for putting the postgres secret that the spicedb cluster can read. In the Secret object, I have to add a field named

datastore_uri

. IIRC, that's not documented, and I found it by reading the error messages. I can create an MR for it if y'all are okay with it

That's a great point! We have an example here: https://github.com/authzed/spicedb-operator/blob/main/examples/cockroachdb-tls-ingress/spicedb/spicedb.yaml but it would make sense to document it in the Readme as well. (we have docs here https://authzed.com/docs/spicedb/operator as well, but they need a bit of a refresh now.)