This commit is contained in:
Max Eisner 2025-12-31 19:04:42 +11:00 committed by GitHub
commit cea0b4e5d7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 17 additions and 0 deletions

View File

@ -103,6 +103,10 @@ As you can see, the contents of `barmanObjectStore` have been copied directly
under the `configuration` field of the `ObjectStore` resource, using the same under the `configuration` field of the `ObjectStore` resource, using the same
secret references. secret references.
### IAM Role for Service Account (IRSA)
If you use IRSA, you need to configure the `ObjectStore` to utilize the correct role as described in the [`Object Store Reference`](object_stores.md#iam-role-for-service-account-irsa).
## Step 2: Update the `Cluster` for plugin WAL archiving ## Step 2: Update the `Cluster` for plugin WAL archiving
Once the `ObjectStore` resource is in place, update the `Cluster` resource as Once the `ObjectStore` resource is in place, update the `Cluster` resource as

View File

@ -101,6 +101,19 @@ spec:
[...] [...]
``` ```
In addition, configure the `ObjectStore` to inherit permissions from the IAM role referenced in the service account:
```yaml
apiVersion: barmancloud.cnpg.io/v1
kind: ObjectStore
metadata:
[...]
spec:
configuration:
s3Credentials:
inheritFromIAMRole: true
```
### S3 Lifecycle Policy ### S3 Lifecycle Policy
Barman Cloud uploads backup files to S3 but does not modify or delete them afterward. Barman Cloud uploads backup files to S3 but does not modify or delete them afterward.