extend docs on defaultUsers

This commit is contained in:
Felix Kunde 2021-06-03 12:09:51 +02:00
parent b58f39f592
commit c0881fc144
1 changed files with 6 additions and 1 deletions

View File

@ -503,7 +503,8 @@ The roles described in the previous paragraph can be granted to LOGIN roles from
the `users` section in the manifest. Optionally, the Postgres Operator can also the `users` section in the manifest. Optionally, the Postgres Operator can also
create default LOGIN roles for the database an each schema individually. These create default LOGIN roles for the database an each schema individually. These
roles will get the `_user` suffix and they inherit all rights from their NOLOGIN roles will get the `_user` suffix and they inherit all rights from their NOLOGIN
counterparts. counterparts. Therefore, you cannot have `defaultRoles` set to `false` and enable
`defaultUsers` at the same time.
| Role name | Member of | Admin | | Role name | Member of | Admin |
| ------------------- | -------------- | ------------- | | ------------------- | -------------- | ------------- |
@ -526,6 +527,10 @@ spec:
defaultUsers: true defaultUsers: true
``` ```
Default access privileges are also defined for LOGIN roles one database and
schema creation. This mean they are currently not set when `defaultUsers`
(or `defaultRoles` for schemas) are enabled at a later point in time.
### Schema `search_path` for default roles ### Schema `search_path` for default roles
The schema [`search_path`](https://www.postgresql.org/docs/13/ddl-schemas.html#DDL-SCHEMAS-PATH) The schema [`search_path`](https://www.postgresql.org/docs/13/ddl-schemas.html#DDL-SCHEMAS-PATH)