mirror of
https://github.com/zalando/postgres-operator.git
synced 2026-10-10 02:56:44 +02:00
Skip creation of OwnerReference if user is in a different namespace (#2912)
Instead of doing a string compare on the username, check the actual namespace of the user to determine if an owner reference can be created.
This commit is contained in:
@@ -1928,7 +1928,7 @@ func (c *Cluster) generateSingleUserSecret(pgUser spec.PgUser) *v1.Secret {
|
|||||||
|
|
||||||
// if secret lives in another namespace we cannot set ownerReferences
|
// if secret lives in another namespace we cannot set ownerReferences
|
||||||
var ownerReferences []metav1.OwnerReference
|
var ownerReferences []metav1.OwnerReference
|
||||||
if c.Config.OpConfig.EnableCrossNamespaceSecret && strings.Contains(username, ".") {
|
if c.Config.OpConfig.EnableCrossNamespaceSecret && c.Postgresql.ObjectMeta.Namespace != pgUser.Namespace {
|
||||||
ownerReferences = nil
|
ownerReferences = nil
|
||||||
} else {
|
} else {
|
||||||
ownerReferences = c.ownerReferences()
|
ownerReferences = c.ownerReferences()
|
||||||
|
|||||||
Reference in New Issue
Block a user