mirror of
https://github.com/zalando/postgres-operator.git
synced 2026-10-03 17:05:52 +02:00
Superuser toggle for team members
Make superuser toggleable for team members. Add and "admin" role to team members if superuser is disabled.
This commit is contained in:
+10
-1
@@ -644,8 +644,17 @@ func (c *Cluster) initHumanUsers() error {
|
||||
return fmt.Errorf("could not get list of team members: %v", err)
|
||||
}
|
||||
for _, username := range teamMembers {
|
||||
flags := []string{constants.RoleFlagLogin, constants.RoleFlagSuperuser}
|
||||
flags := []string{constants.RoleFlagLogin}
|
||||
memberOf := []string{c.OpConfig.PamRoleName}
|
||||
|
||||
if c.OpConfig.EnableTeamSuperuser {
|
||||
flags = append(flags, constants.RoleFlagSuperuser)
|
||||
} else {
|
||||
if c.OpConfig.TeamAdminRole != "" {
|
||||
memberOf = append(memberOf, c.OpConfig.TeamAdminRole)
|
||||
}
|
||||
}
|
||||
|
||||
c.pgUsers[username] = spec.PgUser{Name: username, Flags: flags, MemberOf: memberOf}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user