In some cases, the workload expects to receive an admin user credentials for a database host and the app will create its own database within the instance. We usually call this an -instance resource, and it has the same outputs except that it provides the root user and password and without the database/name output.
This should be based on the existing type=postgres default provisioner.