This is actually pretty interesting. I run a yml based factbook of company variables and this will slot right in.

Have you thought about integrating with Wazuh or similar?

pgroles is a declarative PostgreSQL role manager (YAML in, plan/apply out, CLI or Kubernetes operator). This interactive tutorial walks through a few common Postgres permission errors that you might run into.

You run queries against real PostgreSQL 18 compiled to WASM (PGlite). Building up from early broad grants directly on users in the first section through to abstractions around owners, login roles and roles that scope access.