public_git/postgres-operator
1
0
Fork 0
mirror of https://github.com/zalando/postgres-operator.git synced 2026-10-19 09:45:22 +02:00
Code Issues Projects Releases Wiki Activity

Update RBAC

Browse Source
This commit is contained in:
Sergey Dudoladov
2019-04-02 15:15:42 +02:00
parent 5d44904d14
commit a44da934e6
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/administrator.md
+2
View File
@@ -351,3 +351,5 @@ The operator can manage k8s cron jobs to do periodic logical backups of all PG c
2. Due to the [limitation of Kubernetes cron jobs](https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#cron-job-limitations) it is highly advisable to set up additional monitoring for this feature; such monitoring is outside of the scope of operator responsibilities. 2. Due to the [limitation of Kubernetes cron jobs](https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#cron-job-limitations) it is highly advisable to set up additional monitoring for this feature; such monitoring is outside of the scope of operator responsibilities.
3. The operator does not remove old backups. 3. The operator does not remove old backups.
For that feature to work, your RBAC policy must enable operations on the `cronjobs` resource from the `batch` API group for the operator service account.
manifests/operator-service-account-rbac.yaml
+10 -1
View File
@@ -139,7 +139,16 @@ rules:
- bind - bind
resourceNames: resourceNames:
- zalando-postgres-operator - zalando-postgres-operator
- apiGroups:
- batch
resources:
- cronjobs # enables logical backups
verbs:
- create
- delete
- get
- list
- patch
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding