Installation of PostgreSQL Operator RBAC
Installation of PostgreSQL Operator RBAC
Please note, installation of the PostgreSQL Operator RBAC requires Kubernetes Cluster-Admin.
The first step is to install the PostgreSQL Operator RBAC configuration. This can be accomplished by running:
make installrbac
This script will install the PostreSQL Operator Custom Resource Definitions, CRD’s and creates the following RBAC resources on your Kubernetes cluster:
Setting | Definition |
---|---|
Custom Resource Definitions (crd.yaml) | pgbackups |
pgclusters | |
pgpolicies | |
pgreplicas | |
pgtasks | |
pgupgrades | |
Cluster Roles (cluster-roles.yaml) | pgopclusterrole |
pgopclusterrolecrd | |
Cluster Role Bindings (cluster-roles-bindings.yaml) | pgopclusterbinding |
pgopclusterbindingcrd | |
Service Account (service-accounts.yaml) | postgres-operator |
pgo-backrest | |
Roles (rbac.yaml) | pgo-role |
pgo-backrest-role | |
Role Bindings (rbac.yaml) | pgo-backrest-role-binding |
pgo-role-binding |
Note that the cluster role bindings have a naming convention of pgopclusterbinding-$PGO_OPERATOR_NAMESPACE and pgopclusterbindingcrd-$PGO_OPERATOR_NAMESPACE.
The PGO_OPERATOR_NAMESPACE environment variable is added to make each cluster role binding name unique and to support more than a single PostgreSQL Operator being deployed on the same Kubernertes cluster.