From 9ca7f7bd7aeded0529e80301faa7dc76f348dd54 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes-agent@sirius0xdev.com>
Date: Mon, 25 May 2026 00:36:04 +0000
Subject: [PATCH] fix: enable pgvector for mem0 plugin

- Add allowedExtensions: ['*'] so roles can CREATE EXTENSION
- Grant superuser to 'memory' role (was createdb/createrole, insufficient)
- Needed for mem0 plugin pgvector backend on agent_memory DB

Unblocks kanban task t_3d94b392
---
 apps/base/customer1/hermes-db/pg-cluster-hermes.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/apps/base/customer1/hermes-db/pg-cluster-hermes.yaml b/apps/base/customer1/hermes-db/pg-cluster-hermes.yaml
index dcd6ec1..ae2667f 100644
--- a/apps/base/customer1/hermes-db/pg-cluster-hermes.yaml
+++ b/apps/base/customer1/hermes-db/pg-cluster-hermes.yaml
@@ -16,6 +16,8 @@ spec:
     - pgvector
 
   postgresql:
+    allowedExtensions:
+      - "*"
     parameters:
       # pgvector HNSW index memory settings
       maintenance_work_mem: "256MB"
@@ -35,8 +37,7 @@ spec:
       - name: memory
         ensure: present
         login: true
-        createdb: true
-        createrole: true
+        superuser: true
         passwordSecret:
           name: memory-db-credentials