add documentation and update rbac

charts/postgres-operator/crds/postgresteams.yaml

@@ -40,11 +40,11 @@ spec:
           properties:
             additionalSuperuserTeams:
               type: object
-              description: "Map for teamId and associted additional admin teams"
+              description: "Map for teamId and associted additional superuser teams"
               additionalProperties:
                 type: array
                 nullable: true
-                description: "List of teams to become Postgres admins"
+                description: "List of teams to become Postgres superusers"
                 items:
                   type: string
             additionalTeams:

charts/postgres-operator/templates/clusterrole.yaml

@@ -15,7 +15,6 @@ rules:
   resources:
   - postgresqls
   - postgresqls/status
-  - postgresteams
   - operatorconfigurations
   verbs:
   - create
@@ -26,6 +25,15 @@ rules:
   - patch
   - update
   - watch
+# operator only reads PostgresTeams
+- apiGroups:
+  - acid.zalan.do
+  resources:
+  - postgresteams
+  verbs:
+  - get
+  - list
+  - watch
 # to create or get/update CRDs when starting up
 - apiGroups:
   - apiextensions.k8s.io