|
39 | 39 | spec: |
40 | 40 | description: PostgresClusterSpec defines the desired state of PostgresCluster |
41 | 41 | properties: |
| 42 | + authentication: |
| 43 | + properties: |
| 44 | + rules: |
| 45 | + description: 'More info: https://www.postgresql.org/docs/current/auth-pg-hba-conf.html' |
| 46 | + items: |
| 47 | + properties: |
| 48 | + connection: |
| 49 | + description: |- |
| 50 | + The connection transport this rule matches. Typical values are: |
| 51 | + 1. "host" for network connections that may or may not be encrypted. |
| 52 | + 2. "hostssl" for network connections encrypted using TLS. |
| 53 | + 3. "hostgssenc" for network connections encrypted using GSSAPI. |
| 54 | + maxLength: 20 |
| 55 | + minLength: 1 |
| 56 | + pattern: ^[-a-z0-9]+$ |
| 57 | + type: string |
| 58 | + databases: |
| 59 | + description: Which databases this rule matches. When omitted |
| 60 | + or empty, this rule matches all databases. |
| 61 | + items: |
| 62 | + maxLength: 63 |
| 63 | + minLength: 1 |
| 64 | + type: string |
| 65 | + maxItems: 20 |
| 66 | + type: array |
| 67 | + x-kubernetes-list-type: atomic |
| 68 | + hba: |
| 69 | + description: One line of the "pg_hba.conf" file. Changes |
| 70 | + to this value will be automatically reloaded without validation. |
| 71 | + maxLength: 100 |
| 72 | + minLength: 1 |
| 73 | + pattern: ^[[:print:]]+$ |
| 74 | + type: string |
| 75 | + x-kubernetes-validations: |
| 76 | + - message: cannot include other files |
| 77 | + rule: '!self.trim().startsWith("include")' |
| 78 | + method: |
| 79 | + description: |- |
| 80 | + The authentication method to use when a connection matches this rule. |
| 81 | + The special value "reject" refuses connections that match this rule. |
| 82 | + More info: https://www.postgresql.org/docs/current/auth-methods.html |
| 83 | + maxLength: 20 |
| 84 | + minLength: 1 |
| 85 | + pattern: ^[-a-z0-9]+$ |
| 86 | + type: string |
| 87 | + x-kubernetes-validations: |
| 88 | + - message: the "trust" method is unsafe |
| 89 | + rule: self != "trust" |
| 90 | + options: |
| 91 | + additionalProperties: |
| 92 | + anyOf: |
| 93 | + - type: integer |
| 94 | + - type: string |
| 95 | + x-kubernetes-int-or-string: true |
| 96 | + maxProperties: 20 |
| 97 | + type: object |
| 98 | + x-kubernetes-map-type: atomic |
| 99 | + users: |
| 100 | + description: Which user names this rule matches. When omitted |
| 101 | + or empty, this rule matches all users. |
| 102 | + items: |
| 103 | + maxLength: 63 |
| 104 | + minLength: 1 |
| 105 | + type: string |
| 106 | + maxItems: 20 |
| 107 | + type: array |
| 108 | + x-kubernetes-list-type: atomic |
| 109 | + type: object |
| 110 | + x-kubernetes-map-type: atomic |
| 111 | + x-kubernetes-validations: |
| 112 | + - message: '"hba" cannot be combined with other fields' |
| 113 | + rule: 'has(self.hba) ? !has(self.connection) && !has(self.databases) |
| 114 | + && !has(self.method) && !has(self.options) && !has(self.users) |
| 115 | + : true' |
| 116 | + - message: '"connection" and "method" are required' |
| 117 | + rule: 'has(self.hba) ? true : has(self.connection) && has(self.method)' |
| 118 | + maxItems: 10 |
| 119 | + type: array |
| 120 | + x-kubernetes-list-type: atomic |
| 121 | + type: object |
42 | 122 | backups: |
43 | 123 | description: PostgreSQL backup configuration |
44 | 124 | properties: |
@@ -3117,13 +3197,12 @@ spec: |
3117 | 3197 | to the PersistentVolume backing this claim. |
3118 | 3198 | type: string |
3119 | 3199 | type: object |
| 3200 | + x-kubernetes-map-type: atomic |
3120 | 3201 | x-kubernetes-validations: |
3121 | 3202 | - message: missing accessModes |
3122 | | - rule: has(self.accessModes) && size(self.accessModes) |
3123 | | - > 0 |
| 3203 | + rule: 0 < size(self.accessModes) |
3124 | 3204 | - message: missing storage request |
3125 | | - rule: has(self.resources) && has(self.resources.requests) |
3126 | | - && has(self.resources.requests.storage) |
| 3205 | + rule: has(self.resources.requests.storage) |
3127 | 3206 | required: |
3128 | 3207 | - volumeClaimSpec |
3129 | 3208 | type: object |
@@ -6444,13 +6523,12 @@ spec: |
6444 | 6523 | to the PersistentVolume backing this claim. |
6445 | 6524 | type: string |
6446 | 6525 | type: object |
| 6526 | + x-kubernetes-map-type: atomic |
6447 | 6527 | x-kubernetes-validations: |
6448 | 6528 | - message: missing accessModes |
6449 | | - rule: has(self.accessModes) && size(self.accessModes) |
6450 | | - > 0 |
| 6529 | + rule: 0 < size(self.accessModes) |
6451 | 6530 | - message: missing storage request |
6452 | | - rule: has(self.resources) && has(self.resources.requests) |
6453 | | - && has(self.resources.requests.storage) |
| 6531 | + rule: has(self.resources.requests.storage) |
6454 | 6532 | required: |
6455 | 6533 | - volumeClaimSpec |
6456 | 6534 | type: object |
@@ -10332,12 +10410,12 @@ spec: |
10332 | 10410 | PersistentVolume backing this claim. |
10333 | 10411 | type: string |
10334 | 10412 | type: object |
| 10413 | + x-kubernetes-map-type: atomic |
10335 | 10414 | x-kubernetes-validations: |
10336 | 10415 | - message: missing accessModes |
10337 | | - rule: has(self.accessModes) && size(self.accessModes) > 0 |
| 10416 | + rule: 0 < size(self.accessModes) |
10338 | 10417 | - message: missing storage request |
10339 | | - rule: has(self.resources) && has(self.resources.requests) |
10340 | | - && has(self.resources.requests.storage) |
| 10418 | + rule: has(self.resources.requests.storage) |
10341 | 10419 | metadata: |
10342 | 10420 | description: Metadata contains metadata for custom resources |
10343 | 10421 | properties: |
@@ -10717,13 +10795,12 @@ spec: |
10717 | 10795 | the PersistentVolume backing this claim. |
10718 | 10796 | type: string |
10719 | 10797 | type: object |
| 10798 | + x-kubernetes-map-type: atomic |
10720 | 10799 | x-kubernetes-validations: |
10721 | 10800 | - message: missing accessModes |
10722 | | - rule: has(self.accessModes) && size(self.accessModes) |
10723 | | - > 0 |
| 10801 | + rule: 0 < size(self.accessModes) |
10724 | 10802 | - message: missing storage request |
10725 | | - rule: has(self.resources) && has(self.resources.requests) |
10726 | | - && has(self.resources.requests.storage) |
| 10803 | + rule: has(self.resources.requests.storage) |
10727 | 10804 | name: |
10728 | 10805 | description: |- |
10729 | 10806 | The name for the tablespace, used as the path name for the volume. |
@@ -11158,12 +11235,12 @@ spec: |
11158 | 11235 | PersistentVolume backing this claim. |
11159 | 11236 | type: string |
11160 | 11237 | type: object |
| 11238 | + x-kubernetes-map-type: atomic |
11161 | 11239 | x-kubernetes-validations: |
11162 | 11240 | - message: missing accessModes |
11163 | | - rule: has(self.accessModes) && size(self.accessModes) > 0 |
| 11241 | + rule: 0 < size(self.accessModes) |
11164 | 11242 | - message: missing storage request |
11165 | | - rule: has(self.resources) && has(self.resources.requests) |
11166 | | - && has(self.resources.requests.storage) |
| 11243 | + rule: has(self.resources.requests.storage) |
11167 | 11244 | required: |
11168 | 11245 | - dataVolumeClaimSpec |
11169 | 11246 | type: object |
@@ -17248,6 +17325,12 @@ spec: |
17248 | 17325 | PersistentVolume backing this claim. |
17249 | 17326 | type: string |
17250 | 17327 | type: object |
| 17328 | + x-kubernetes-map-type: atomic |
| 17329 | + x-kubernetes-validations: |
| 17330 | + - message: missing accessModes |
| 17331 | + rule: 0 < size(self.accessModes) |
| 17332 | + - message: missing storage request |
| 17333 | + rule: has(self.resources.requests.storage) |
17251 | 17334 | image: |
17252 | 17335 | description: |- |
17253 | 17336 | Name of a container image that can run pgAdmin 4. Changing this value causes |
|
0 commit comments