Prerequisites for Flexible Server

Ensure that a separate subnet is attached to it with delegation (Microsoft.DBforPostgreSWL/flexibleServers and service endpoints Storage, KeyVault, SQL, and Web).
If using an existing Azure Database for Postgres Flexible Server Contributor role permission must be attached to managed identity on resource level to start/stop Postgres Flexible server through scheduling.
A flexible server must be used in the same resource group and region in which other resources of the Kyvos cluster are deployed. If the Flexible Server is not in the same resource group, the Start and Stop functionality during scheduling will not work.
To use an externally created Flexible Server in deployments, use the ARM template (FlexibleServerKyvosManagerRepository and FlexibleServerKyvosRepository available in the Azure Installation Files folder) to create a Flexible Server that can be used directly in the deployments.
OR
you can also create Flexible Server version 16 (supported for both new deployments and upgrades) through Microsoft, then you need to complete the following steps. For more information about how to create Flexible Server, refer to Microsoft documentation.
1. For Kyvos repository
  1. The database name must be delverepo.
  2. The username must be postgres
  3. The following tags are expected on the external repository:
    UsedBy - Kyvos
    ROLE - DATABASE
    LAYER - Metadata_Storage
2. For Kyvos Manager repository
  1. Database name must be kmrepo.
  2. Username must be kmdbuser
  3. Following tags are expected on the external repository:
    UsedBy - Kyvos
    ROLE - DATABASE_KM
    LAYER - Metadata_Storage

Wizard-based Deployment

Flexible Server password prerequisites for Wizard based deployment:

For Kyvos shared repository, password of existing repository needs to be provided.
For Kyvos non-shared repository, password of repository needs to be as delve123@. However, the user can provide any password of his choice on wizard window. Kyvos repository password will be changed after deployment.
If using external repository for Kyvos Manager, you must provide repository password as kyvosmanager#123

Automated Deployment

Note
For automated deployment, no action is needed as:

Newly created Flexible Server: User provided password will be used for repository. No password change is required.
Existing Flexible Server: Password of the existing repository needs to be provided. No password change is required.

Points to know

Using the same external repository instance is not recommended/certified for KyvosManager & Kyvos both. Cluster scheduling with non-shared repo will cause the DB instance to go down; thus, the Kyvos Manager will not work properly.
If the same repository instance is used, then the database for Kyvos Manager and Kyvos must be different.
The default database name for:
- Kyvos is delverepo.
- Kyvos Manager is kmrepo.
If any time the same external repository instance gets configured in Kyvos Manager and Kyvos. In that case, ensure that on the Switch Repository page of Kyvos Manager, the Shared repository is checked and configuration is saved.