Keycloak-db-secret dynamic pic credentials from external postgres operators secret

I am currently using the Postgresql Operator from PGO, the Postgres Operator from Crunchy Data
for every user, it is creating its own user-related secret eg.: demo-pguser-keycloakuser and it is generating a dynamic password. Now I am trying to connect Postgres with my keycloak operator, but keycloak does not understand the keys other than this
POSTGRES_DATABASE: “”
POSTGRES_EXTERNAL_ADDRESS: “”
POSTGRES_EXTERNAL_PORT: “”
POSTGRES_HOST: “”
POSTGRES_PASSWORD: “”
POSTGRES_USERNAME: “”.
And Postgres secret contains
apiVersion: v1
data:
dbname: base64value
host: base64value
password: base64value
pgbouncer-host: base64value
pgbouncer-port: base64value
pgbouncer-uri: base64value
port: base64value
This secret contains the password and the username, so it would be good to be able to put in the CR of the Keycloak the reference and the key of the secret to be used rather than a hardcoded secret name "Keycloak-db-secret

Thank you in advance

resolved
using keycloak crd
point keycloak env variables to new secret
here how i used:

apiVersion: keycloak.org/v1alpha1
kind: Keycloak
metadata:
  labels:
      app: example-keycloak
  name: example-keycloak
  namespace: demo
spec:
  externalDatabase:
    enabled: true
  instances: 1
  externalAccess:
    enabled: True
  keycloakDeploymentSpec:
    experimental:
      env:
        - name: DB_DATABASE
          valueFrom:
            secretKeyRef:
              name: keycloak-pguser-keycloakuser
              key: dbname
        - name: DB_ADDR
          valueFrom:
            secretKeyRef:
              name: keycloak-pguser-keycloakuser
              key: host
        - name: DB_PORT
          valueFrom:
            secretKeyRef:
              name: keycloak-pguser-keycloakuser
              key: port
        - name: DB_PASSWORD
          valueFrom:
            secretKeyRef:
              name: keycloak-pguser-keycloakuser
              key: password
        - name: DB_USER
          valueFrom:
            secretKeyRef:
              name: keycloak-pguser-keycloakuser
              key: user

> here the condition is the data base should be under same namespace (postgres in demo namespace)