docs: add IRSA instructions

Signed-off-by: Max Eisner <4730112+max-ae@users.noreply.github.com>
This commit is contained in:
Max Eisner 2025-08-18 13:33:27 +02:00
parent e0c8b64470
commit 78d02d6803
No known key found for this signature in database
GPG Key ID: 6E3F4D9D00AF6111
2 changed files with 17 additions and 0 deletions

View File

@ -103,6 +103,10 @@ As you can see, the contents of `barmanObjectStore` have been copied directly
under the `configuration` field of the `ObjectStore` resource, using the same
secret references.
### IAM Role for Service Account (IRSA)
If you use IRSA, you need to configure the `ObjectStore` to utilize the correct role as described in the [`Object Store Reference`](object_stores.md#iam-role-for-service-account-irsa).
## Step 2: Update the `Cluster` for plugin WAL archiving
Once the `ObjectStore` resource is in place, update the `Cluster` resource as

View File

@ -101,6 +101,19 @@ spec:
[...]
```
In addition, configure the `ObjectStore` to inherit permissions from the IAM role referenced in the service account:
```yaml
apiVersion: barmancloud.cnpg.io/v1
kind: ObjectStore
metadata:
[...]
spec:
configuration:
s3Credentials:
inheritFromIAMRole: true
```
### S3 Lifecycle Policy
Barman Cloud uploads backup files to S3 but does not modify or delete them afterward.