public_git/postgres-operator
1
0
Fork 0
mirror of https://github.com/zalando/postgres-operator.git synced 2026-10-06 03:54:29 +02:00
Code Issues Projects Releases Wiki Activity

operator RBAC needs podsecuritypolicy to grant it to postgres-pod

Browse Source
This commit is contained in:
Felix Kunde
2020-02-18 17:31:31 +01:00
parent 91475ab918
commit b0018b6ecf
2 changed files with 36 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/postgres-operator/templates/clusterrole.yaml
+18 -9
View File
@@ -134,6 +134,18 @@ rules:
- get
- list
- patch
# to CRUD cron jobs for logical backups
- apiGroups:
- batch
resources:
- cronjobs
verbs:
- create
- delete
- get
- list
- patch
- update
# to get namespaces operator resources can run in
- apiGroups:
- ""
@@ -166,16 +178,13 @@ rules:
verbs:
- get
- create
# to CRUD cron jobs for logical backups
# to grant privilege to run privileged pods
- apiGroups:
- batch
- extensions
resources:
- cronjobs
- podsecuritypolicies
resourceNames:
- privileged
verbs:
- create
- delete
- get
- list
- patch
- update
- use
{{ end }}
manifests/operator-service-account-rbac.yaml
+18 -9
View File
@@ -135,6 +135,18 @@ rules:
- get
- list
- patch
# to CRUD cron jobs for logical backups
- apiGroups:
- batch
resources:
- cronjobs
verbs:
- create
- delete
- get
- list
- patch
- update
# to get namespaces operator resources can run in
- apiGroups:
- ""
@@ -167,18 +179,15 @@ rules:
verbs:
- get
- create
# to CRUD cron jobs for logical backups
# to grant privilege to run privileged pods
- apiGroups:
- batch
- extensions
resources:
- cronjobs
- podsecuritypolicies
resourceNames:
- privileged
verbs:
- create
- delete
- get
- list
- patch
- update
- use
---
apiVersion: rbac.authorization.k8s.io/v1