plugin-barman-cloud/internal/controller
Marco Nenciarini 8b4fac41d0 fix: discover affected Roles by label instead of listing Clusters
The ObjectStore controller now lists Roles by a label
(barmancloud.cnpg.io/cluster) set by the Pre hook, inspects their
rules to find which ObjectStores they reference, then fetches those
ObjectStores and rebuilds the rules. This removes the clusters
get/list/watch permission. Conflict handling uses RetryOnConflict to
match the existing project pattern, and partial failures across Roles
are aggregated with errors.Join instead of failing on the first one.

Pre-existing Roles without the label won't be found by the ObjectStore
controller until the Pre hook adds it on the next Cluster
reconciliation. Same staleness window as the current main branch.

Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
2026-04-10 10:03:00 +02:00
..
doc.go feat(ip): assign copyright to the Linux Foundation (#571) 2025-10-07 18:06:06 +02:00
objectstore_controller_test.go fix: discover affected Roles by label instead of listing Clusters 2026-04-10 10:03:00 +02:00
objectstore_controller.go fix: discover affected Roles by label instead of listing Clusters 2026-04-10 10:03:00 +02:00
suite_test.go fix(rbac): reconcile Role when ObjectStore spec changes 2026-04-10 10:03:00 +02:00