Auth Stack PostgreSQL — cerebro-authstack-pg

The primary database server for the auth stack and HITL platform.

Details

Field	Value
Server name	cerebro-authstack-pg
FQDN	cerebro-authstack-pg.postgres.database.azure.com
Resource group	testing
Region	South India
Engine	PostgreSQL 16
SKU	Standard_B2s (Burstable)
Storage	32 GB
Private DNS	cerebro-authstack-pg.private.postgres.database.azure.com
Network	Private — inside cerebro-auth-vnet

Databases

Database	Owner Service	Purpose
keycloak	Keycloak	Users, realms, clients, sessions
openfga	OpenFGA	Authorization tuples and models
postgres	System	Default admin database

Connecting

This server is private — it's only reachable from within cerebro-auth-vnet. To connect from your machine, exec into the toolbox:

# Open a shell in the toolbox (inside VNet)
az containerapp exec \
  --name authstack-toolbox \
  --resource-group testing \
  --command "/bin/sh"

# Inside the container — connect to Keycloak DB
psql "host=cerebro-authstack-pg.private.postgres.database.azure.com \
  dbname=keycloak user=<admin-user> sslmode=require"

Admin credentials are in Key Vault → cerebro-auth-kv-62be6d5f.

Backups

Azure automatically backs up Flexible Server databases. Default retention: 7 days.

To restore:

az postgres flexible-server restore \
  --resource-group testing \
  --name cerebro-authstack-pg-restored \
  --source-server cerebro-authstack-pg \
  --restore-time "2026-05-29T12:00:00Z"

Scaling

To upgrade the SKU:

az postgres flexible-server update \
  --resource-group testing \
  --name cerebro-authstack-pg \
  --sku-name Standard_D2s_v3

Monitor

az monitor metrics list \
  --resource /subscriptions/62be6d5f-97a5-4764-9bc9-ceb85a39a1f4/resourceGroups/testing/providers/Microsoft.DBforPostgreSQL/flexibleServers/cerebro-authstack-pg \
  --metric cpu_percent \
  --output table