add documentation and update rbac

manifests/operator-service-account-rbac.yaml

@@ -16,7 +16,6 @@ rules:
   resources:
   - postgresqls
   - postgresqls/status
-  - postgresteams
   - operatorconfigurations
   verbs:
   - create
@@ -27,6 +26,15 @@ rules:
   - patch
   - update
   - watch
+# operator only reads PostgresTeams
+- apiGroups:
+  - acid.zalan.do
+  resources:
+  - postgresteams
+  verbs:
+  - get
+  - list
+  - watch
 # to create or get/update CRDs when starting up
 - apiGroups:
   - apiextensions.k8s.io

manifests/postgresteam.crd.yaml

@@ -36,11 +36,11 @@ spec:
           properties:
             additionalSuperuserTeams:
               type: object
-              description: "Map for teamId and associted additional admin teams"
+              description: "Map for teamId and associted additional superuser teams"
               additionalProperties:
                 type: array
                 nullable: true
-                description: "List of teams to become Postgres admins"
+                description: "List of teams to become Postgres superusers"
                 items:
                   type: string
             additionalTeams: