From 284649500e308e206db4d6fb3290ee7c97e99b7d Mon Sep 17 00:00:00 2001
From: Felix Kunde <felix-kunde@gmx.de>
Date: Wed, 15 Dec 2021 13:46:46 +0100
Subject: [PATCH] disable streams in chart

---
 .../templates/clusterrole.yaml                |  2 ++
 charts/postgres-operator/values.yaml          |  3 ++
 manifests/operator-service-account-rbac.yaml  | 28 +++++++++----------
 3 files changed, 19 insertions(+), 14 deletions(-)

diff --git a/charts/postgres-operator/templates/clusterrole.yaml b/charts/postgres-operator/templates/clusterrole.yaml
index aed736049..55fead75f 100644
--- a/charts/postgres-operator/templates/clusterrole.yaml
+++ b/charts/postgres-operator/templates/clusterrole.yaml
@@ -35,6 +35,7 @@ rules:
   - list
   - watch
 # all verbs allowed for event streams
+{{- if .Values.enableStreams }}
 - apiGroups:
   - zalando.org
   resources:
@@ -48,6 +49,7 @@ rules:
   - patch
   - update
   - watch
+{{- end }}
 # to create or get/update CRDs when starting up
 - apiGroups:
   - apiextensions.k8s.io
diff --git a/charts/postgres-operator/values.yaml b/charts/postgres-operator/values.yaml
index 65619845a..21ba9f935 100644
--- a/charts/postgres-operator/values.yaml
+++ b/charts/postgres-operator/values.yaml
@@ -362,6 +362,9 @@ configConnectionPooler:
   connection_pooler_default_cpu_limit: "1"
   connection_pooler_default_memory_limit: 100Mi
 
+# Zalando's internal CDC stream feature
+enableStreams: false
+
 rbac:
   # Specifies whether RBAC resources should be created
   create: true
diff --git a/manifests/operator-service-account-rbac.yaml b/manifests/operator-service-account-rbac.yaml
index e983d71a0..882ad7281 100644
--- a/manifests/operator-service-account-rbac.yaml
+++ b/manifests/operator-service-account-rbac.yaml
@@ -35,20 +35,20 @@ rules:
   - get
   - list
   - watch
-# all verbs allowed for event streams
-- apiGroups:
-  - zalando.org
-  resources:
-  - fabriceventstreams
-  verbs:
-  - create
-  - delete
-  - deletecollection
-  - get
-  - list
-  - patch
-  - update
-  - watch
+# all verbs allowed for event streams (Zalando-internal feature)
+#- apiGroups:
+#  - zalando.org
+#  resources:
+#  - fabriceventstreams
+#  verbs:
+#  - create
+#  - delete
+#  - deletecollection
+#  - get
+#  - list
+#  - patch
+#  - update
+#  - watch
 # to create or get/update CRDs when starting up
 - apiGroups:
   - apiextensions.k8s.io