diff --git a/charts/cluster/README.md b/charts/cluster/README.md index 134588a77..a51b47d99 100644 --- a/charts/cluster/README.md +++ b/charts/cluster/README.md @@ -174,12 +174,14 @@ refer to the [CloudNativePG Documentation](https://cloudnative-pg.io/documentat | cluster.postgresql.parameters | object | `{}` | PostgreSQL configuration options (postgresql.conf) | | cluster.postgresql.pg_hba | list | `[]` | PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) | | cluster.postgresql.pg_ident | list | `[]` | PostgreSQL User Name Maps rules (lines to be appended to the pg_ident.conf file) | +| cluster.postgresql.ldap | list | `[]` | PostgreSQL LDAP configuration (see https://cloudnative-pg.io/documentation/current/postgresql_conf/#ldap-configuration) | | cluster.postgresql.shared_preload_libraries | list | `[]` | Lists of shared preload libraries to add to the default ones | | cluster.primaryUpdateMethod | string | `"switchover"` | Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated. It can be switchover (default) or restart. | | cluster.primaryUpdateStrategy | string | `"unsupervised"` | Strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated (unsupervised - default) or manual (supervised) | | cluster.priorityClassName | string | `""` | | | cluster.resources | object | `{}` | Resources requirements of every generated Pod. Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information. We strongly advise you use the same setting for limits and requests so that your cluster pods are given a Guaranteed QoS. See: https://kubernetes.io/docs/concepts/workloads/pods/pod-qos/ | | cluster.roles | list | `[]` | This feature enables declarative management of existing roles, as well as the creation of new roles if they are not already present in the database. See: https://cloudnative-pg.io/documentation/current/declarative_role_management/ | +| cluster.services | object | `{}` | Customization of service definions. Please refer to https://cloudnative-pg.io/documentation/1.24/service_management/ | | cluster.storage.size | string | `"8Gi"` | | | cluster.storage.storageClass | string | `""` | | | cluster.superuserSecret | string | `""` | | diff --git a/charts/cluster/templates/cluster.yaml b/charts/cluster/templates/cluster.yaml index 169683fef..be0725c00 100644 --- a/charts/cluster/templates/cluster.yaml +++ b/charts/cluster/templates/cluster.yaml @@ -64,11 +64,19 @@ spec: {{- toYaml .pg_hba | nindent 6 }} pg_ident: {{- toYaml .pg_ident | nindent 6 }} + {{- if .ldap }} + ldap: + {{- toYaml .ldap | nindent 6 }} + {{- end}} parameters: {{- toYaml .parameters | nindent 6 }} {{ end }} - managed: + managed: + {{- with .Values.cluster.services }} + services: + {{- toYaml . | nindent 6 }} + {{ end }} {{- with .Values.cluster.roles }} roles: {{- toYaml . | nindent 6 }} diff --git a/charts/cluster/values.schema.json b/charts/cluster/values.schema.json index e20ca872e..4c53cb19c 100644 --- a/charts/cluster/values.schema.json +++ b/charts/cluster/values.schema.json @@ -270,6 +270,9 @@ }, "shared_preload_libraries": { "type": "array" + }, + "ldap": { + "type": "object" } } }, @@ -288,6 +291,9 @@ "roles": { "type": "array" }, + "services": { + "type": "object" + }, "storage": { "type": "object", "properties": { diff --git a/charts/cluster/values.yaml b/charts/cluster/values.yaml index 9977f2818..0d8758d99 100644 --- a/charts/cluster/values.yaml +++ b/charts/cluster/values.yaml @@ -160,6 +160,9 @@ cluster: # -- The GID of the postgres user inside the image, defaults to 26 postgresGID: -1 + # -- Customization of service definions. Please refer to https://cloudnative-pg.io/documentation/1.24/service_management/ + services: {} + # -- Resources requirements of every generated Pod. # Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information. # We strongly advise you use the same setting for limits and requests so that your cluster pods are given a Guaranteed QoS. @@ -263,6 +266,16 @@ cluster: # - mymap /^(.*)@mydomain\.com$ \1 shared_preload_libraries: [] # - pgaudit + ldap: {} + # https://cloudnative-pg.io/documentation/1.24/postgresql_conf/#ldap-configuration + # server: 'openldap.default.svc.cluster.local' + # bindSearchAuth: + # baseDN: 'ou=org,dc=example,dc=com' + # bindDN: 'cn=admin,dc=example,dc=com' + # bindPassword: + # name: 'ldapBindPassword' + # key: 'data' + # searchAttribute: 'uid' # -- BootstrapInitDB is the configuration of the bootstrap process when initdb is used. # See: https://cloudnative-pg.io/documentation/current/bootstrap/