Skip to content

Commit 7aeeeb4

Browse files
gkechgkech
committed
generate new crds
1 parent 2034c06 commit 7aeeeb4

File tree

9 files changed

+1163
-99
lines changed

9 files changed

+1163
-99
lines changed

‎build/crd/crunchy/generated/postgres-operator.crunchydata.com_postgresclusters.yaml‎

Lines changed: 105 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,61 @@ spec:
3939
spec:
4040
description: PostgresClusterSpec defines the desired state of PostgresCluster
4141
properties:
42+
authentication:
43+
description: |-
44+
Defines additional authentication rules for PostgreSQL host-based
45+
authentication (pg_hba.conf). Rules added here are applied after any
46+
mandatory rules and before the default scram-sha-256 fallback.
47+
properties:
48+
rules:
49+
description: |-
50+
Rules to include in pg_hba.conf. They are evaluated after mandatory
51+
operator rules and before the default scram-sha-256 fallback.
52+
items:
53+
description: |-
54+
PostgresAuthenticationRule defines a single pg_hba.conf entry. Use either
55+
the structured fields or the raw HBA line, not both.
56+
properties:
57+
connection:
58+
description: 'Connection type: local, host, hostssl, hostnossl,
59+
hostgssenc, hostnogssenc.'
60+
type: string
61+
databases:
62+
description: Databases to match. An empty list matches all
63+
databases.
64+
items:
65+
type: string
66+
type: array
67+
hba:
68+
description: |-
69+
A raw pg_hba.conf line. When non-empty, this line is used as-is and the
70+
structured fields are ignored.
71+
type: string
72+
method:
73+
description: Authentication method to use when a connection
74+
matches this rule.
75+
type: string
76+
options:
77+
additionalProperties:
78+
anyOf:
79+
- type: integer
80+
- type: string
81+
x-kubernetes-int-or-string: true
82+
description: Options for the authentication method (e.g.
83+
ldapserver, ldapport).
84+
type: object
85+
users:
86+
description: Users to match. An empty list matches all users.
87+
items:
88+
type: string
89+
type: array
90+
required:
91+
- connection
92+
- method
93+
type: object
94+
type: array
95+
x-kubernetes-list-type: atomic
96+
type: object
4297
backups:
4398
description: PostgreSQL backup configuration
4499
properties:
@@ -7387,6 +7442,7 @@ spec:
73877442
config:
73887443
properties:
73897444
files:
7445+
description: Files to mount under "/etc/postgres".
73907446
items:
73917447
description: |-
73927448
Projection that may be projected along with other supported volume types.
@@ -7828,6 +7884,55 @@ spec:
78287884
type: object
78297885
type: object
78307886
type: array
7887+
parameters:
7888+
additionalProperties:
7889+
anyOf:
7890+
- type: integer
7891+
- type: string
7892+
x-kubernetes-int-or-string: true
7893+
description: |-
7894+
Configuration parameters for the PostgreSQL server. Some values will
7895+
be reloaded without validation and some cause PostgreSQL to restart.
7896+
Some values cannot be changed at all.
7897+
More info: https://www.postgresql.org/docs/current/runtime-config.html
7898+
maxProperties: 50
7899+
type: object
7900+
x-kubernetes-map-type: granular
7901+
x-kubernetes-validations:
7902+
- message: 'cannot change PGDATA path: config_file, data_directory'
7903+
rule: '!has(self.config_file) && !has(self.data_directory)'
7904+
- message: cannot change external_pid_file
7905+
rule: '!has(self.external_pid_file)'
7906+
- message: 'cannot change authentication path: hba_file, ident_file'
7907+
rule: '!has(self.hba_file) && !has(self.ident_file)'
7908+
- message: 'network connectivity is always enabled: listen_addresses'
7909+
rule: '!has(self.listen_addresses)'
7910+
- message: change port using .spec.port instead
7911+
rule: '!has(self.port)'
7912+
- message: TLS is always enabled
7913+
rule: '!has(self.ssl) && !self.exists(k, k.startsWith("ssl_")
7914+
&& !(k == ''ssl_groups'' || k == ''ssl_ecdh_curve''))'
7915+
- message: domain socket paths cannot be changed
7916+
rule: '!self.exists(k, k.startsWith("unix_socket_"))'
7917+
- message: wal_level must be "replica" or higher
7918+
rule: '!has(self.wal_level) || self.wal_level in ["logical"]'
7919+
- message: wal_log_hints are always enabled
7920+
rule: '!has(self.wal_log_hints)'
7921+
- rule: '!has(self.archive_mode) && !has(self.archive_command)
7922+
&& !has(self.restore_command)'
7923+
- rule: '!has(self.recovery_target) && !self.exists(k, k.startsWith("recovery_target_"))'
7924+
- message: hot_standby is always enabled
7925+
rule: '!has(self.hot_standby)'
7926+
- rule: '!has(self.synchronous_standby_names)'
7927+
- rule: '!has(self.primary_conninfo) && !has(self.primary_slot_name)'
7928+
- message: delayed replication is not supported at this time
7929+
rule: '!has(self.recovery_min_apply_delay)'
7930+
- message: cluster_name is derived from the PostgresCluster name
7931+
rule: '!has(self.cluster_name)'
7932+
- message: disabling logging_collector is unsafe
7933+
rule: '!has(self.logging_collector)'
7934+
- message: log_file_mode cannot be changed
7935+
rule: '!has(self.log_file_mode)'
78317936
type: object
78327937
customReplicationTLSSecret:
78337938
description: |-

‎build/crd/percona/generated/pgv2.percona.com_perconapgclusters.yaml‎

Lines changed: 109 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,62 @@ spec:
5656
type: object
5757
spec:
5858
properties:
59+
authentication:
60+
description: |-
61+
Defines custom pg_hba.conf authentication rules. Rules are evaluated
62+
after mandatory operator rules and before the default scram-sha-256
63+
fallback. Use this together with spec.config.files to supply supporting
64+
files such as an LDAP CA certificate.
65+
properties:
66+
rules:
67+
description: |-
68+
Rules to include in pg_hba.conf. They are evaluated after mandatory
69+
operator rules and before the default scram-sha-256 fallback.
70+
items:
71+
description: |-
72+
PostgresAuthenticationRule defines a single pg_hba.conf entry. Use either
73+
the structured fields or the raw HBA line, not both.
74+
properties:
75+
connection:
76+
description: 'Connection type: local, host, hostssl, hostnossl,
77+
hostgssenc, hostnogssenc.'
78+
type: string
79+
databases:
80+
description: Databases to match. An empty list matches all
81+
databases.
82+
items:
83+
type: string
84+
type: array
85+
hba:
86+
description: |-
87+
A raw pg_hba.conf line. When non-empty, this line is used as-is and the
88+
structured fields are ignored.
89+
type: string
90+
method:
91+
description: Authentication method to use when a connection
92+
matches this rule.
93+
type: string
94+
options:
95+
additionalProperties:
96+
anyOf:
97+
- type: integer
98+
- type: string
99+
x-kubernetes-int-or-string: true
100+
description: Options for the authentication method (e.g.
101+
ldapserver, ldapport).
102+
type: object
103+
users:
104+
description: Users to match. An empty list matches all users.
105+
items:
106+
type: string
107+
type: array
108+
required:
109+
- connection
110+
- method
111+
type: object
112+
type: array
113+
x-kubernetes-list-type: atomic
114+
type: object
59115
autoCreateUserSchema:
60116
description: |-
61117
Indicates whether schemas are automatically created for the user
@@ -7581,11 +7637,12 @@ spec:
75817637
type: string
75827638
config:
75837639
description: |-
7584-
Additional configuration files to mount into PostgreSQL containers.
7585-
Can be used to provide a custom CA certificate for LDAP authentication
7586-
via spec.config.files (e.g. mounting a Secret with an LDAP CA cert).
7640+
Configuration for PostgreSQL config files and server parameters.
7641+
Use spec.config.files to mount files (e.g. LDAP CA certificate) under
7642+
/etc/postgres, and spec.config.parameters to set postgresql.conf values.
75877643
properties:
75887644
files:
7645+
description: Files to mount under "/etc/postgres".
75897646
items:
75907647
description: |-
75917648
Projection that may be projected along with other supported volume types.
@@ -8027,6 +8084,55 @@ spec:
80278084
type: object
80288085
type: object
80298086
type: array
8087+
parameters:
8088+
additionalProperties:
8089+
anyOf:
8090+
- type: integer
8091+
- type: string
8092+
x-kubernetes-int-or-string: true
8093+
description: |-
8094+
Configuration parameters for the PostgreSQL server. Some values will
8095+
be reloaded without validation and some cause PostgreSQL to restart.
8096+
Some values cannot be changed at all.
8097+
More info: https://www.postgresql.org/docs/current/runtime-config.html
8098+
maxProperties: 50
8099+
type: object
8100+
x-kubernetes-map-type: granular
8101+
x-kubernetes-validations:
8102+
- message: 'cannot change PGDATA path: config_file, data_directory'
8103+
rule: '!has(self.config_file) && !has(self.data_directory)'
8104+
- message: cannot change external_pid_file
8105+
rule: '!has(self.external_pid_file)'
8106+
- message: 'cannot change authentication path: hba_file, ident_file'
8107+
rule: '!has(self.hba_file) && !has(self.ident_file)'
8108+
- message: 'network connectivity is always enabled: listen_addresses'
8109+
rule: '!has(self.listen_addresses)'
8110+
- message: change port using .spec.port instead
8111+
rule: '!has(self.port)'
8112+
- message: TLS is always enabled
8113+
rule: '!has(self.ssl) && !self.exists(k, k.startsWith("ssl_")
8114+
&& !(k == ''ssl_groups'' || k == ''ssl_ecdh_curve''))'
8115+
- message: domain socket paths cannot be changed
8116+
rule: '!self.exists(k, k.startsWith("unix_socket_"))'
8117+
- message: wal_level must be "replica" or higher
8118+
rule: '!has(self.wal_level) || self.wal_level in ["logical"]'
8119+
- message: wal_log_hints are always enabled
8120+
rule: '!has(self.wal_log_hints)'
8121+
- rule: '!has(self.archive_mode) && !has(self.archive_command)
8122+
&& !has(self.restore_command)'
8123+
- rule: '!has(self.recovery_target) && !self.exists(k, k.startsWith("recovery_target_"))'
8124+
- message: hot_standby is always enabled
8125+
rule: '!has(self.hot_standby)'
8126+
- rule: '!has(self.synchronous_standby_names)'
8127+
- rule: '!has(self.primary_conninfo) && !has(self.primary_slot_name)'
8128+
- message: delayed replication is not supported at this time
8129+
rule: '!has(self.recovery_min_apply_delay)'
8130+
- message: cluster_name is derived from the PostgresCluster name
8131+
rule: '!has(self.cluster_name)'
8132+
- message: disabling logging_collector is unsafe
8133+
rule: '!has(self.logging_collector)'
8134+
- message: log_file_mode cannot be changed
8135+
rule: '!has(self.log_file_mode)'
80308136
type: object
80318137
crVersion:
80328138
description: |-

0 commit comments

Comments
 (0)