mirror of
https://github.com/cloudnative-pg/plugin-barman-cloud.git
synced 2026-01-11 21:23:12 +01:00
docs: add IRSA instructions
Signed-off-by: Max Eisner <4730112+max-ae@users.noreply.github.com>
This commit is contained in:
parent
e0c8b64470
commit
78d02d6803
@ -103,6 +103,10 @@ As you can see, the contents of `barmanObjectStore` have been copied directly
|
|||||||
under the `configuration` field of the `ObjectStore` resource, using the same
|
under the `configuration` field of the `ObjectStore` resource, using the same
|
||||||
secret references.
|
secret references.
|
||||||
|
|
||||||
|
### IAM Role for Service Account (IRSA)
|
||||||
|
|
||||||
|
If you use IRSA, you need to configure the `ObjectStore` to utilize the correct role as described in the [`Object Store Reference`](object_stores.md#iam-role-for-service-account-irsa).
|
||||||
|
|
||||||
## Step 2: Update the `Cluster` for plugin WAL archiving
|
## Step 2: Update the `Cluster` for plugin WAL archiving
|
||||||
|
|
||||||
Once the `ObjectStore` resource is in place, update the `Cluster` resource as
|
Once the `ObjectStore` resource is in place, update the `Cluster` resource as
|
||||||
|
|||||||
@ -101,6 +101,19 @@ spec:
|
|||||||
[...]
|
[...]
|
||||||
```
|
```
|
||||||
|
|
||||||
|
In addition, configure the `ObjectStore` to inherit permissions from the IAM role referenced in the service account:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
apiVersion: barmancloud.cnpg.io/v1
|
||||||
|
kind: ObjectStore
|
||||||
|
metadata:
|
||||||
|
[...]
|
||||||
|
spec:
|
||||||
|
configuration:
|
||||||
|
s3Credentials:
|
||||||
|
inheritFromIAMRole: true
|
||||||
|
```
|
||||||
|
|
||||||
### S3 Lifecycle Policy
|
### S3 Lifecycle Policy
|
||||||
|
|
||||||
Barman Cloud uploads backup files to S3 but does not modify or delete them afterward.
|
Barman Cloud uploads backup files to S3 but does not modify or delete them afterward.
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user