The database options are specified in the spec section of the database custom resource. These options include options that you can change and options that are created by the controller for applications or developers. For example, the database connection information is stored in a secret.


A string containing the name of a secret that contains the desired database password.

If you do not specify a secret name, a secret is created for you with the name constructed from the database name ( with “redb-” as a prefix.

If you specify a secret name, you must create the secret before you create the database resource.

To create your own database password in the secret, run:

 kubectl create secret generic mydb --from-literal=password=<password>

where <password> is your desired password in plain text.

In the database custom resource, the value is just secret name. In this example, the name is mydb:

databaseSecretName: mydb

When the database is created, the secret is updated to include the port and service name for the database but the password does not change. If you did not create the secret, it is also updated with the generated database password.


A boolean that indicates whether client authentication should be enforced (default: true).


An eviction policy (default: volitile-lru)


The amount of memory to allocate that is at least 100MB. Values are an integer suffixed with a unit. For example, values like 1GB, 250MB, etc.


The value for the database persistence setting.

The value is a keyword with the values:

Value Description
disabled Data is not persisted (default)
aofEverySecond Data is synced to disk every second
aofAlways Data is synced to disk with every write.
snapshotEvery1Hour A snapshot of the database is created every hour
snapshotEvery6Hour A snapshot of the database is created every 6 hours.
snapshotEvery12Hour A snapshot of the database is created every 12 hours.


A boolean that indicates whether the database is rack-zone aware (default: the cluster setting)


The name of the cluster to create the database on.

The value has a single name property. For example, to refer to the rec cluster:

   name: rec


A boolean that indicates whether in-memory database replication is enabled (default: false).

When enabled, the database has a replica shard for every master.


The number of database shards (default: 1).


Controls SSL authentication and encryption for connections to the database.

Value Description
disabled no incoming connection to the Database uses SSL (default)
enabled all incoming connections to the Database must use SSL.
replica_ssl databases that replicate from this database must use SSL.