Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-08-10 14:15:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/postgresql-ha] fix: 🔒 Move service-account token auto-mount to pod declaration (#22451)

Browse Source 
Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
Signed-off-by: Javier J. Salmerón-García <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
2024-01-19 10:21:14 +01:00
committed by GitHub
parent 0f92db5dd4
commit d7c4565ac1
6 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/postgresql-ha/Chart.yaml
+1 -1
View File
@@ -40,4 +40,4 @@ maintainers:
name: postgresql-ha
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/postgresql-ha
version: 12.6.1
version: 12.7.0
bitnami/postgresql-ha/README.md
+3
View File
@@ -106,6 +106,7 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
| `postgresql.replicaCount` | Number of replicas to deploy. Use an odd number. Having 3 replicas is the minimum to get quorum when promoting a new primary. | `3` |
| `postgresql.updateStrategy.type` | Postgresql statefulset strategy type | `RollingUpdate` |
| `postgresql.containerPorts.postgresql` | PostgreSQL port | `5432` |
| `postgresql.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `postgresql.hostAliases` | Deployment pod host aliases | `[]` |
| `postgresql.hostNetwork` | Specify if host network should be enabled for PostgreSQL pod | `false` |
| `postgresql.hostIPC` | Specify if host IPC should be enabled for PostgreSQL pod | `false` |
@@ -236,6 +237,7 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
| `witness.replicaCount` | Number of replicas to deploy. | `1` |
| `witness.updateStrategy.type` | Postgresql statefulset strategy type | `RollingUpdate` |
| `witness.containerPorts.postgresql` | PostgreSQL witness port | `5432` |
| `witness.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `witness.hostAliases` | Deployment pod host aliases | `[]` |
| `witness.hostNetwork` | Specify if host network should be enabled for PostgreSQL witness pod | `false` |
| `witness.hostIPC` | Specify if host IPC should be enabled for PostgreSQL witness pod | `false` |
@@ -347,6 +349,7 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
| `pgpool.image.debug` | Specify if debug logs should be enabled | `false` |
| `pgpool.customUsers.usernames` | Comma or semicolon separated list of additional users that will be performing connections to the database using pgpool. | `""` |
| `pgpool.customUsers.passwords` | Comma or semicolon separated list of the associated passwords for the users above. Must have the same number of elements as the usernames list. | `""` |
| `pgpool.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `pgpool.hostAliases` | Deployment pod host aliases | `[]` |
| `pgpool.customUsersSecret` | Name of a secret containing the usernames and passwords of accounts that will be added to pgpool_passwd | `""` |
| `pgpool.existingSecret` | Pgpool admin password using existing secret | `""` |
bitnami/postgresql-ha/templates/pgpool/deployment.yaml
+1
View File
@@ -39,6 +39,7 @@ spec:
{{- end }}
spec:
{{- include "postgresql-ha.image.pullSecrets" . | nindent 6 }}
automountServiceAccountToken: {{ .Values.pgpool.automountServiceAccountToken }}
{{- if .Values.pgpool.hostAliases }}
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.pgpool.hostAliases "context" $) | nindent 8 }}
{{- end }}
bitnami/postgresql-ha/templates/postgresql/statefulset.yaml
+1
View File
@@ -41,6 +41,7 @@ spec:
{{- end }}
spec:
{{- include "postgresql-ha.image.pullSecrets" . | nindent 6 }}
automountServiceAccountToken: {{ .Values.postgresql.automountServiceAccountToken }}
{{- if .Values.postgresql.hostAliases }}
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.postgresql.hostAliases "context" $) | nindent 8 }}
{{- end }}
bitnami/postgresql-ha/templates/postgresql/witness-statefulset.yaml
+1
View File
@@ -42,6 +42,7 @@ spec:
{{- end }}
spec:
{{- include "postgresql-ha.image.pullSecrets" . | nindent 6 }}
automountServiceAccountToken: {{ .Values.witness.automountServiceAccountToken }}
{{- if .Values.witness.hostAliases }}
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.witness.hostAliases "context" $) | nindent 8 }}
{{- end }}
bitnami/postgresql-ha/values.yaml
+9
View File
@@ -148,6 +148,9 @@ postgresql:
##
containerPorts:
postgresql: 5432
## @param postgresql.automountServiceAccountToken Mount Service Account token in pod
##
automountServiceAccountToken: false
## @param postgresql.hostAliases Deployment pod host aliases
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
##
@@ -652,6 +655,9 @@ witness:
##
containerPorts:
postgresql: 5432
## @param witness.automountServiceAccountToken Mount Service Account token in pod
##
automountServiceAccountToken: false
## @param witness.hostAliases Deployment pod host aliases
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
##
@@ -1084,6 +1090,9 @@ pgpool:
customUsers:
usernames: ""
passwords: ""
## @param pgpool.automountServiceAccountToken Mount Service Account token in pod
##
automountServiceAccountToken: false
## @param pgpool.hostAliases Deployment pod host aliases
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
##