CloudNativePG in Production: Hidden Friction in Hardened Kubernetes

CloudNativePG simplifies PostgreSQL on Kubernetes, but hardened clusters with admission controllers and security policies introduce unexpected complexity. The real debugging challenges often stem not from database configuration but from policy conflicts between bootstrap Jobs and the operator's own Pod exemptions. Understanding these friction points is critical for teams deploying stateful databases in security-first Kubernetes environments.