Expand description
pgroles-operator — Kubernetes operator for PostgresPolicy CRDs.
Watches PostgresPolicy custom resources and reconciles PostgreSQL roles,
grants, default privileges, and memberships against live databases.
Modules§
- advisory
- PostgreSQL advisory locking for cross-replica reconciliation safety.
- candidate
PostgresPolicyCandidatelifecycle: planning, revalidation, retention.- context
- Shared operator context — database pool cache, metrics, and configuration.
- crd
- Custom Resource Definition for
PostgresPolicy. - ephemeral
- Ephemeral PostgreSQL membership access reconciliation.
- events
- Transition-based Kubernetes Events for
PostgresPolicyresources. - k8s_
names - Construction and validation of Kubernetes identifiers.
- observability
- Operator health endpoints and OTLP metrics export.
- password
- Password generation and Kubernetes Secret management for operator-generated passwords.
- plan
- Plan lifecycle management for
PostgresPolicyPlanresources. - promotion
- Promotion: recognising that a policy’s new content is a reviewed candidate, and gating execution on the approval that candidate carries.
- reconciler
- Reconciliation logic for
PostgresPolicycustom resources. - request_
index - Watch-fed indexes for ephemeral access requests.