927 lines
39 KiB
YAML
927 lines
39 KiB
YAML
---
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.17.3
|
|
labels:
|
|
app.kubernetes.io/name: postgres-operator
|
|
name: operatorconfigurations.acid.zalan.do
|
|
spec:
|
|
group: acid.zalan.do
|
|
names:
|
|
categories:
|
|
- all
|
|
kind: OperatorConfiguration
|
|
listKind: OperatorConfigurationList
|
|
plural: operatorconfigurations
|
|
shortNames:
|
|
- opconfig
|
|
singular: operatorconfiguration
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: Spilo image to be used for Pods
|
|
jsonPath: .configuration.docker_image
|
|
name: Image
|
|
type: string
|
|
- description: Label for K8s resources created by operator
|
|
jsonPath: .configuration.kubernetes.cluster_name_label
|
|
name: Cluster-Label
|
|
type: string
|
|
- description: Name of service account to be used
|
|
jsonPath: .configuration.kubernetes.pod_service_account_name
|
|
name: Service-Account
|
|
type: string
|
|
- description: Minimum number of instances per Postgres cluster
|
|
jsonPath: .configuration.min_instances
|
|
name: Min-Instances
|
|
type: integer
|
|
- description: Age of the OperatorConfiguration resource
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: Age
|
|
type: date
|
|
name: v1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: OperatorConfiguration defines the specification for the OperatorConfiguration.
|
|
properties:
|
|
apiVersion:
|
|
description: |-
|
|
APIVersion defines the versioned schema of this representation of an object.
|
|
Servers should convert recognized schemas to the latest internal value, and
|
|
may reject unrecognized values.
|
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
|
type: string
|
|
configuration:
|
|
description: OperatorConfigurationData defines the operation config
|
|
properties:
|
|
aws_or_gcp:
|
|
description: AWSGCPConfiguration defines the configuration for AWS
|
|
properties:
|
|
additional_secret_mount:
|
|
type: string
|
|
additional_secret_mount_path:
|
|
type: string
|
|
aws_region:
|
|
default: eu-central-1
|
|
type: string
|
|
gcp_credentials:
|
|
type: string
|
|
irsa_role_arn:
|
|
type: string
|
|
kube_iam_role:
|
|
type: string
|
|
log_s3_bucket:
|
|
type: string
|
|
wal_az_storage_account:
|
|
type: string
|
|
wal_gs_bucket:
|
|
type: string
|
|
wal_s3_bucket:
|
|
type: string
|
|
type: object
|
|
connection_pooler:
|
|
description: ConnectionPoolerConfiguration defines default configuration
|
|
for connection pooler
|
|
properties:
|
|
connection_pooler_default_cpu_limit:
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
connection_pooler_default_cpu_request:
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
connection_pooler_default_memory_limit:
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
connection_pooler_default_memory_request:
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
connection_pooler_image:
|
|
default: ghcr.io/zalando/postgres-operator/pgbouncer:latest
|
|
type: string
|
|
connection_pooler_max_db_connections:
|
|
format: int32
|
|
type: integer
|
|
connection_pooler_mode:
|
|
default: transaction
|
|
enum:
|
|
- session
|
|
- transaction
|
|
type: string
|
|
connection_pooler_number_of_instances:
|
|
default: 2
|
|
format: int32
|
|
minimum: 1
|
|
type: integer
|
|
connection_pooler_schema:
|
|
default: pooler
|
|
type: string
|
|
connection_pooler_user:
|
|
default: pooler
|
|
type: string
|
|
type: object
|
|
crd_categories:
|
|
items:
|
|
type: string
|
|
type: array
|
|
debug:
|
|
description: OperatorDebugConfiguration defines options for the debug
|
|
mode
|
|
properties:
|
|
debug_logging:
|
|
default: true
|
|
type: boolean
|
|
enable_database_access:
|
|
default: true
|
|
type: boolean
|
|
type: object
|
|
docker_image:
|
|
default: ghcr.io/zalando/spilo-18:4.1-p2
|
|
type: string
|
|
enable_crd_registration:
|
|
default: true
|
|
type: boolean
|
|
enable_lazy_spilo_upgrade:
|
|
type: boolean
|
|
enable_maintenance_windows:
|
|
default: true
|
|
type: boolean
|
|
enable_pgversion_env_var:
|
|
default: true
|
|
type: boolean
|
|
enable_shm_volume:
|
|
default: true
|
|
type: boolean
|
|
enable_spilo_wal_path_compat:
|
|
type: boolean
|
|
enable_team_id_clustername_prefix:
|
|
type: boolean
|
|
etcd_host:
|
|
default: ""
|
|
type: string
|
|
ignore_instance_limits_annotation_key:
|
|
type: string
|
|
ignore_resources_limits_annotation_key:
|
|
type: string
|
|
kubernetes:
|
|
description: KubernetesMetaConfiguration defines k8s conf required
|
|
for all Postgres clusters and the operator itself
|
|
properties:
|
|
additional_pod_capabilities:
|
|
items:
|
|
type: string
|
|
type: array
|
|
cluster_domain:
|
|
default: cluster.local
|
|
type: string
|
|
cluster_labels:
|
|
additionalProperties:
|
|
type: string
|
|
default:
|
|
application: spilo
|
|
type: object
|
|
cluster_name_label:
|
|
default: cluster-name
|
|
type: string
|
|
custom_pod_annotations:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
delete_annotation_date_key:
|
|
type: string
|
|
delete_annotation_name_key:
|
|
type: string
|
|
downscaler_annotations:
|
|
items:
|
|
type: string
|
|
type: array
|
|
enable_cross_namespace_secret:
|
|
type: boolean
|
|
enable_finalizers:
|
|
type: boolean
|
|
enable_init_containers:
|
|
default: true
|
|
type: boolean
|
|
enable_owner_references:
|
|
type: boolean
|
|
enable_persistent_volume_claim_deletion:
|
|
default: true
|
|
type: boolean
|
|
enable_pod_antiaffinity:
|
|
type: boolean
|
|
enable_pod_disruption_budget:
|
|
default: true
|
|
type: boolean
|
|
enable_readiness_probe:
|
|
type: boolean
|
|
enable_secrets_deletion:
|
|
default: true
|
|
type: boolean
|
|
enable_sidecars:
|
|
default: true
|
|
type: boolean
|
|
ignored_annotations:
|
|
items:
|
|
type: string
|
|
type: array
|
|
infrastructure_roles_secret_name:
|
|
type: string
|
|
infrastructure_roles_secrets:
|
|
description: namespaced name of the secret containing infrastructure
|
|
roles names and passwords
|
|
items:
|
|
properties:
|
|
defaultrolevalue:
|
|
type: string
|
|
defaultuservalue:
|
|
type: string
|
|
details:
|
|
description: This field point out the detailed yaml definition
|
|
of the role, if exists
|
|
type: string
|
|
passwordkey:
|
|
type: string
|
|
rolekey:
|
|
type: string
|
|
secretname:
|
|
description: |-
|
|
Name of a secret which describes the role, and optionally name of a
|
|
configmap with an extra information
|
|
type: string
|
|
template:
|
|
type: boolean
|
|
userkey:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
inherited_annotations:
|
|
items:
|
|
type: string
|
|
type: array
|
|
inherited_labels:
|
|
items:
|
|
type: string
|
|
type: array
|
|
liveness_probe:
|
|
description: |-
|
|
Probe describes a health check to be performed against a container to determine whether it is
|
|
alive or ready to receive traffic.
|
|
properties:
|
|
exec:
|
|
description: Exec specifies a command to execute in the container.
|
|
properties:
|
|
command:
|
|
description: |-
|
|
Command is the command line to execute inside the container, the working directory for the
|
|
command is root ('/') in the container's filesystem. The command is simply exec'd, it is
|
|
not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
|
|
a shell, you need to explicitly call out to that shell.
|
|
Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
|
|
items:
|
|
type: string
|
|
type: array
|
|
x-kubernetes-list-type: atomic
|
|
type: object
|
|
failureThreshold:
|
|
description: |-
|
|
Minimum consecutive failures for the probe to be considered failed after having succeeded.
|
|
Defaults to 3. Minimum value is 1.
|
|
format: int32
|
|
type: integer
|
|
grpc:
|
|
description: GRPC specifies a GRPC HealthCheckRequest.
|
|
properties:
|
|
port:
|
|
description: Port number of the gRPC service. Number must
|
|
be in the range 1 to 65535.
|
|
format: int32
|
|
type: integer
|
|
service:
|
|
default: ""
|
|
description: |-
|
|
Service is the name of the service to place in the gRPC HealthCheckRequest
|
|
(see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
|
|
|
|
If this is not specified, the default behavior is defined by gRPC.
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
httpGet:
|
|
description: HTTPGet specifies an HTTP GET request to perform.
|
|
properties:
|
|
host:
|
|
description: |-
|
|
Host name to connect to, defaults to the pod IP. You probably want to set
|
|
"Host" in httpHeaders instead.
|
|
type: string
|
|
httpHeaders:
|
|
description: Custom headers to set in the request. HTTP
|
|
allows repeated headers.
|
|
items:
|
|
description: HTTPHeader describes a custom header to
|
|
be used in HTTP probes
|
|
properties:
|
|
name:
|
|
description: |-
|
|
The header field name.
|
|
This will be canonicalized upon output, so case-variant names will be understood as the same header.
|
|
type: string
|
|
value:
|
|
description: The header field value
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-type: atomic
|
|
path:
|
|
description: Path to access on the HTTP server.
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: |-
|
|
Name or number of the port to access on the container.
|
|
Number must be in the range 1 to 65535.
|
|
Name must be an IANA_SVC_NAME.
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
description: |-
|
|
Scheme to use for connecting to the host.
|
|
Defaults to HTTP.
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
description: |-
|
|
Number of seconds after the container has started before liveness probes are initiated.
|
|
More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
description: |-
|
|
How often (in seconds) to perform the probe.
|
|
Default to 10 seconds. Minimum value is 1.
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
description: |-
|
|
Minimum consecutive successes for the probe to be considered successful after having failed.
|
|
Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
description: TCPSocket specifies a connection to a TCP port.
|
|
properties:
|
|
host:
|
|
description: 'Optional: Host name to connect to, defaults
|
|
to the pod IP.'
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: |-
|
|
Number or name of the port to access on the container.
|
|
Number must be in the range 1 to 65535.
|
|
Name must be an IANA_SVC_NAME.
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
terminationGracePeriodSeconds:
|
|
description: |-
|
|
Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
|
|
The grace period is the duration in seconds after the processes running in the pod are sent
|
|
a termination signal and the time when the processes are forcibly halted with a kill signal.
|
|
Set this value longer than the expected cleanup time for your process.
|
|
If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
|
|
value overrides the value provided by the pod spec.
|
|
Value must be non-negative integer. The value zero indicates stop immediately via
|
|
the kill signal (no opportunity to shut down).
|
|
This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
|
|
Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
|
|
format: int64
|
|
type: integer
|
|
timeoutSeconds:
|
|
description: |-
|
|
Number of seconds after which the probe times out.
|
|
Defaults to 1 second. Minimum value is 1.
|
|
More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
master_pod_move_timeout:
|
|
default: 20m
|
|
description: timeout for successful migration of master pods from
|
|
unschedulable node
|
|
type: string
|
|
node_readiness_label:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
node_readiness_label_merge:
|
|
enum:
|
|
- AND
|
|
- OR
|
|
type: string
|
|
oauth_token_secret_name:
|
|
default: postgres-operator
|
|
description: namespaced name of the secret containing the OAuth2
|
|
token to pass to the teams API
|
|
type: string
|
|
pdb_master_label_selector:
|
|
default: true
|
|
type: boolean
|
|
pdb_name_format:
|
|
default: postgres-{cluster}-pdb
|
|
description: defines the template for PDB names
|
|
type: string
|
|
persistent_volume_claim_retention_policy:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
pod_antiaffinity_preferred_during_scheduling:
|
|
type: boolean
|
|
pod_antiaffinity_topology_key:
|
|
default: kubernetes.io/hostname
|
|
type: string
|
|
pod_environment_configmap:
|
|
description: namespaced name of the ConfigMap with environment
|
|
variables to populate on every pod
|
|
type: string
|
|
pod_environment_secret:
|
|
type: string
|
|
pod_management_policy:
|
|
default: ordered_ready
|
|
enum:
|
|
- ordered_ready
|
|
- parallel
|
|
type: string
|
|
pod_priority_class_name:
|
|
type: string
|
|
pod_role_label:
|
|
default: spilo-role
|
|
type: string
|
|
pod_service_account_definition:
|
|
type: string
|
|
pod_service_account_name:
|
|
default: postgres-pod
|
|
type: string
|
|
pod_service_account_role_binding_definition:
|
|
type: string
|
|
pod_terminate_grace_period:
|
|
default: 5m
|
|
description: Postgres pods are terminated forcefully after this
|
|
timeout
|
|
type: string
|
|
secret_name_template:
|
|
default: '{username}.{cluster}.credentials.{tprkind}.{tprgroup}'
|
|
description: |-
|
|
template for database user secrets generated by the operator,
|
|
here username contains the namespace in the format namespace.username
|
|
if the user is in different namespace than cluster and cross namespace secrets
|
|
are enabled via `enable_cross_namespace_secret` flag in the configuration.
|
|
type: string
|
|
share_pgsocket_with_sidecars:
|
|
type: boolean
|
|
spilo_allow_privilege_escalation:
|
|
default: true
|
|
type: boolean
|
|
spilo_fsgroup:
|
|
format: int64
|
|
type: integer
|
|
spilo_privileged:
|
|
type: boolean
|
|
spilo_runasgroup:
|
|
format: int64
|
|
type: integer
|
|
spilo_runasuser:
|
|
format: int64
|
|
type: integer
|
|
storage_resize_mode:
|
|
default: pvc
|
|
enum:
|
|
- ebs
|
|
- mixed
|
|
- pvc
|
|
- "off"
|
|
type: string
|
|
toleration:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
watched_namespace:
|
|
type: string
|
|
type: object
|
|
kubernetes_use_configmaps:
|
|
default: true
|
|
type: boolean
|
|
load_balancer:
|
|
description: LoadBalancerConfiguration defines the LB configuration
|
|
properties:
|
|
custom_service_annotations:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
db_hosted_zone:
|
|
type: string
|
|
enable_master_load_balancer:
|
|
type: boolean
|
|
enable_master_node_port:
|
|
type: boolean
|
|
enable_master_pooler_load_balancer:
|
|
type: boolean
|
|
enable_master_pooler_node_port:
|
|
type: boolean
|
|
enable_replica_load_balancer:
|
|
type: boolean
|
|
enable_replica_node_port:
|
|
type: boolean
|
|
enable_replica_pooler_load_balancer:
|
|
type: boolean
|
|
enable_replica_pooler_node_port:
|
|
type: boolean
|
|
external_traffic_policy:
|
|
default: Cluster
|
|
enum:
|
|
- Cluster
|
|
- Local
|
|
type: string
|
|
master_dns_name_format:
|
|
default: '{cluster}.{namespace}.{hostedzone}'
|
|
description: defines the DNS name string template for the master
|
|
load balancer cluster
|
|
type: string
|
|
master_legacy_dns_name_format:
|
|
default: '{cluster}.{team}.{hostedzone}'
|
|
description: deprecated DNS template for master load balancer
|
|
using team name
|
|
type: string
|
|
replica_dns_name_format:
|
|
default: '{cluster}-repl.{namespace}.{hostedzone}'
|
|
description: defines the DNS name string template for the replica
|
|
load balancer cluster
|
|
type: string
|
|
replica_legacy_dns_name_format:
|
|
default: '{cluster}-repl.{team}.{hostedzone}'
|
|
description: deprecated DNS template for replica load balancer
|
|
using team name
|
|
type: string
|
|
type: object
|
|
logging_rest_api:
|
|
description: LoggingRESTAPIConfiguration defines Logging API conf
|
|
properties:
|
|
api_port:
|
|
default: 8080
|
|
type: integer
|
|
cluster_history_entries:
|
|
default: 1000
|
|
type: integer
|
|
ring_log_lines:
|
|
default: 100
|
|
type: integer
|
|
type: object
|
|
logical_backup:
|
|
description: OperatorLogicalBackupConfiguration defines configuration
|
|
for logical backup
|
|
properties:
|
|
logical_backup_azure_storage_account_key:
|
|
type: string
|
|
logical_backup_azure_storage_account_name:
|
|
type: string
|
|
logical_backup_azure_storage_container:
|
|
type: string
|
|
logical_backup_cpu_limit:
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
logical_backup_cpu_request:
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
logical_backup_cronjob_environment_secret:
|
|
type: string
|
|
logical_backup_docker_image:
|
|
default: ghcr.io/zalando/postgres-operator/logical-backup:v2.0.0
|
|
type: string
|
|
logical_backup_failed_jobs_history_limit:
|
|
default: 3
|
|
format: int32
|
|
minimum: 0
|
|
type: integer
|
|
logical_backup_google_application_credentials:
|
|
type: string
|
|
logical_backup_job_prefix:
|
|
default: logical-backup-
|
|
type: string
|
|
logical_backup_memory_limit:
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
logical_backup_memory_request:
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
logical_backup_provider:
|
|
default: s3
|
|
enum:
|
|
- az
|
|
- gcs
|
|
- s3
|
|
type: string
|
|
logical_backup_s3_access_key_id:
|
|
type: string
|
|
logical_backup_s3_bucket:
|
|
type: string
|
|
logical_backup_s3_bucket_prefix:
|
|
type: string
|
|
logical_backup_s3_endpoint:
|
|
type: string
|
|
logical_backup_s3_region:
|
|
type: string
|
|
logical_backup_s3_retention_time:
|
|
type: string
|
|
logical_backup_s3_secret_access_key:
|
|
type: string
|
|
logical_backup_s3_sse:
|
|
type: string
|
|
logical_backup_schedule:
|
|
default: 30 00 * * *
|
|
pattern: ^(\d+|\*)(/\d+)?(\s+(\d+|\*)(/\d+)?){4}$
|
|
type: string
|
|
logical_backup_successful_jobs_history_limit:
|
|
default: 3
|
|
format: int32
|
|
minimum: 0
|
|
type: integer
|
|
logical_backup_ttl_seconds_after_finished:
|
|
default: 86400
|
|
format: int32
|
|
minimum: 0
|
|
type: integer
|
|
type: object
|
|
maintenance_windows:
|
|
items:
|
|
pattern: ^\ *((Mon|Tue|Wed|Thu|Fri|Sat|Sun):(2[0-3]|[01]?\d):([0-5]?\d)|(2[0-3]|[01]?\d):([0-5]?\d))-((2[0-3]|[01]?\d):([0-5]?\d)|(2[0-3]|[01]?\d):([0-5]?\d))\
|
|
*$
|
|
type: string
|
|
type: array
|
|
major_version_upgrade:
|
|
description: MajorVersionUpgradeConfiguration defines how to execute
|
|
major version upgrades of Postgres.
|
|
properties:
|
|
major_version_upgrade_mode:
|
|
default: manual
|
|
enum:
|
|
- "off"
|
|
- manual
|
|
- full
|
|
type: string
|
|
major_version_upgrade_team_allow_list:
|
|
items:
|
|
type: string
|
|
type: array
|
|
minimal_major_version:
|
|
default: "14"
|
|
type: string
|
|
target_major_version:
|
|
default: "18"
|
|
type: string
|
|
type: object
|
|
max_instances:
|
|
default: -1
|
|
description: -1 = disabled
|
|
format: int32
|
|
minimum: -1
|
|
type: integer
|
|
min_instances:
|
|
default: -1
|
|
description: -1 = disabled
|
|
format: int32
|
|
minimum: -1
|
|
type: integer
|
|
patroni:
|
|
description: PatroniConfiguration defines configuration for Patroni
|
|
properties:
|
|
enable_patroni_failsafe_mode:
|
|
type: boolean
|
|
type: object
|
|
postgres_pod_resources:
|
|
description: PostgresPodResourcesDefaults defines the spec of default
|
|
resources
|
|
properties:
|
|
default_cpu_limit:
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
default_cpu_request:
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
default_memory_limit:
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
default_memory_request:
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
max_cpu_request:
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
max_memory_request:
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
min_cpu_limit:
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
min_memory_limit:
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
type: object
|
|
repair_period:
|
|
default: 5m
|
|
description: period between consecutive repair requests
|
|
type: string
|
|
resync_period:
|
|
default: 30m
|
|
description: period between consecutive sync requests
|
|
type: string
|
|
scalyr:
|
|
description: ScalyrConfiguration defines the configuration for ScalyrAPI
|
|
properties:
|
|
scalyr_api_key:
|
|
type: string
|
|
scalyr_cpu_limit:
|
|
default: "1"
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
scalyr_cpu_request:
|
|
default: 100m
|
|
pattern: ^(\d+m|\d+(\.\d{1,3})?)$
|
|
type: string
|
|
scalyr_image:
|
|
type: string
|
|
scalyr_memory_limit:
|
|
default: 500Mi
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
scalyr_memory_request:
|
|
default: 50Mi
|
|
pattern: ^(\d+(e\d+)?|\d+(\.\d+)?(e\d+)?[EPTGMK]i?)$
|
|
type: string
|
|
scalyr_server_url:
|
|
default: https://upload.eu.scalyr.com
|
|
type: string
|
|
type: object
|
|
set_memory_request_to_limit:
|
|
type: boolean
|
|
sidecar_docker_images:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
sidecars:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
teams_api:
|
|
description: TeamsAPIConfiguration defines the configuration of TeamsAPI
|
|
properties:
|
|
enable_admin_role_for_users:
|
|
default: true
|
|
type: boolean
|
|
enable_postgres_team_crd:
|
|
default: true
|
|
type: boolean
|
|
enable_postgres_team_crd_superusers:
|
|
type: boolean
|
|
enable_team_member_deprecation:
|
|
type: boolean
|
|
enable_team_superuser:
|
|
type: boolean
|
|
enable_teams_api:
|
|
type: boolean
|
|
pam_configuration:
|
|
default: https://info.example.com/oauth2/tokeninfo?access_token=
|
|
uid realm=/employees
|
|
type: string
|
|
pam_role_name:
|
|
default: zalandos
|
|
type: string
|
|
postgres_superuser_teams:
|
|
items:
|
|
type: string
|
|
type: array
|
|
protected_role_names:
|
|
default:
|
|
- admin
|
|
- cron_admin
|
|
items:
|
|
type: string
|
|
type: array
|
|
role_deletion_suffix:
|
|
default: _deleted
|
|
type: string
|
|
team_admin_role:
|
|
default: admin
|
|
type: string
|
|
team_api_role_configuration:
|
|
additionalProperties:
|
|
type: string
|
|
default:
|
|
log_statement: all
|
|
type: object
|
|
teams_api_url:
|
|
default: https://teams.example.com/api/
|
|
type: string
|
|
type: object
|
|
timeouts:
|
|
description: OperatorTimeouts defines the timeout of ResourceCheck,
|
|
PodWait, ReadyWait
|
|
properties:
|
|
patroni_api_check_interval:
|
|
default: 1s
|
|
description: interval between consecutive attempts of operator
|
|
calling the Patroni API
|
|
type: string
|
|
patroni_api_check_timeout:
|
|
default: 5s
|
|
description: timeout when waiting for successful response from
|
|
Patroni API
|
|
type: string
|
|
pod_deletion_wait_timeout:
|
|
default: 10m
|
|
description: timeout when waiting for the Postgres pods to be
|
|
deleted
|
|
type: string
|
|
pod_label_wait_timeout:
|
|
default: 10m
|
|
description: timeout when waiting for pod role and cluster labels
|
|
type: string
|
|
ready_wait_interval:
|
|
default: 4s
|
|
description: interval between consecutive attempts waiting for
|
|
postgresql CRD to be created
|
|
type: string
|
|
ready_wait_timeout:
|
|
default: 30s
|
|
description: timeout for the complete postgres CRD creation
|
|
type: string
|
|
resource_check_interval:
|
|
default: 3s
|
|
description: interval to wait between consecutive attempts to
|
|
check for some K8s resources
|
|
type: string
|
|
resource_check_timeout:
|
|
default: 10m
|
|
description: timeout when waiting for the presence of a certain
|
|
K8s resource
|
|
type: string
|
|
type: object
|
|
users:
|
|
description: PostgresUsersConfiguration defines the system users of
|
|
Postgres.
|
|
properties:
|
|
additional_owner_roles:
|
|
items:
|
|
type: string
|
|
type: array
|
|
enable_password_rotation:
|
|
type: boolean
|
|
password_rotation_interval:
|
|
default: 90
|
|
format: int32
|
|
type: integer
|
|
password_rotation_user_retention:
|
|
default: 120
|
|
format: int32
|
|
type: integer
|
|
replication_username:
|
|
default: standby
|
|
type: string
|
|
super_username:
|
|
default: postgres
|
|
type: string
|
|
type: object
|
|
workers:
|
|
default: 8
|
|
format: int32
|
|
minimum: 1
|
|
type: integer
|
|
type: object
|
|
kind:
|
|
description: |-
|
|
Kind is a string value representing the REST resource this object represents.
|
|
Servers may infer this from the endpoint the client submits requests to.
|
|
Cannot be updated.
|
|
In CamelCase.
|
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
required:
|
|
- configuration
|
|
- metadata
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|