feat(ql3): add strong cluster run management

deploy/kubernetes/ql3-cluster/operators/cloudnative-pg/credentials.example.yaml

@@ -122,6 +122,18 @@ stringData:
 ---
 apiVersion: v1
 kind: Secret
+metadata:
+  name: ql3-postgres-run-manager-auth
+  namespace: qinglong3-system
+  labels:
+    cnpg.io/reload: 'true'
+type: kubernetes.io/basic-auth
+stringData:
+  username: ql3_run_manager
+  password: REPLACE_WITH_SECRET_MANAGER_VALUE
+---
+apiVersion: v1
+kind: Secret
 metadata:
   name: ql3-postgres-worker-credential-manager-auth
   namespace: qinglong3-system

deploy/kubernetes/ql3-cluster/operators/cloudnative-pg/database-roles.yaml

@@ -240,6 +240,30 @@ spec:
 ---
 apiVersion: postgresql.cnpg.io/v1
 kind: DatabaseRole
+metadata:
+  name: ql3-postgres-run-manager
+  labels:
+    app.kubernetes.io/name: ql3-postgres
+    app.kubernetes.io/component: database-role
+    app.kubernetes.io/part-of: qinglong3
+spec:
+  cluster:
+    name: ql3-postgres
+  name: ql3_run_manager
+  comment: QingLong strongly authenticated human Run retry authority
+  login: true
+  superuser: false
+  createdb: false
+  createrole: false
+  replication: false
+  bypassrls: false
+  connectionLimit: 4
+  databaseRoleReclaimPolicy: retain
+  passwordSecret:
+    name: ql3-postgres-run-manager-auth
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: DatabaseRole
 metadata:
   name: ql3-postgres-worker-credential-manager
   labels: