diff --git a/infrastructure-secrets.yaml b/infrastructure-secrets.yaml
index 2a5f4a6..05586c4 100644
--- a/infrastructure-secrets.yaml
+++ b/infrastructure-secrets.yaml
@@ -3394,24 +3394,30 @@ environments:
                 user: bn_keycloak
               custom_keys:
                 password: password
-            - name: camunda-postgresql
+            - id: camunda-postgresql
+              schema: ""
               namespace: camunda
-              type: database
-              sink: vault
-              vault_path: camunda/postgresql
-              depends_on:
-                cluster: main
-                db: identity
-                user: identity
+              ownership: managed
+              source:
+                kind: postgresql_user
+                ref:
+                    cluster: main
+                    database: identity
+                    user: identity
+              targets:
+                - kind: vault
+                  path: camunda/postgresql
               custom_keys:
                 password: identity-password
               extra_fields:
                 keycloak-password:
-                    source_kind: secret_ref
-                    ref: vault://camunda/_keycloak_db#password
+                    source:
+                        kind: secret_ref
+                        ref: vault://camunda/_keycloak_db#password
                 postgres-password:
-                    source_kind: secret_ref
-                    ref: vault://postgresql/admin#postgres-password
+                    source:
+                        kind: secret_ref
+                        ref: vault://postgresql/admin#postgres-password
             - name: camunda-keycloak-admin
               namespace: camunda
               type: opaque
@@ -3445,8 +3451,8 @@ sops:
             U1hiSTkrMzRwMGpOeGtYNnNyNElYOE0KOHsFrj5+iMx8tIymrIhLpB8xbLaztR7J
             E+ViNs6OGeIS90qwxAD7OP9raGB/lsTfh9V/zigM8gF+OzGErF73aQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T09:29:50Z"
-    mac: ENC[AES256_GCM,data:fhZ8LTukUm1VEtyW+i/ycJCiOjzQRs++btLC3g77dXSl236DrJLm5FEHD8wD/h7nhiP4cex6rQfcCEmPT3zAQrAXUwUG2UzaGwjI3iPR36kZ9aJ4YRhguQOy407YX11B7SRRpAYD+Zz/pxo/B1mWbZF7yOlYv1+myIJ1GUXiLFs=,iv:8UNF7VUhBq84r2hoFIfbnLc3/wMXKQcHbwxAiu5IUgg=,tag:Xo2UOzTdyZopcNy7nZblFQ==,type:str]
+    lastmodified: "2026-08-26T09:42:54Z"
+    mac: ENC[AES256_GCM,data:G259Bjo+DZSyeqMm0FkARAfv94SpLPT9vXfKWFpz38vW2CgahNsY9Io5Q5SJf02aspJkP/OPiiOzMVMcm0qL+42lBOY6rBfWQTb6yXswl2ja21wjzkxIKPx0C7WlHZcMj8/gw3kVXw/TXitT1UFzpjqYuWhb4qQMXj5s4/OuFR8=,iv:7lWaTtotzTpNVeIu0/JhYrTiHQYT0Fl/pKhUxBoOc/I=,tag:P9WLm3qnsw3XHWxZP+2Tsg==,type:str]
     pgp: []
     encrypted_regex: ^(data)$
     version: 3.12.2