cloudbeaver/example/init/cloudbeaver-vault-database

#!/bin/sh

set -euo pipefail

vault write database/roles/cloudbeaver \
    db_name="postgres" \
    creation_statements="CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}'; \
        GRANT \"cloudbeaver\" TO \"{{name}}\"; \
        ALTER ROLE \"{{name}}\" SET role = \"cloudbeaver\"" \
    default_ttl="12h" \
    max_ttl="720h"