lunarway / postgresql-controller

PostgreSQL controller for managing database user access through kubernetes custom resources
Apache License 2.0
9 stars 2 forks source link

feat/actually add extensions #299

Closed kjuulh closed 2 months ago

kjuulh commented 4 months ago

Adds the actual reconciliation loop for declaratively enabling extensions on the database.

To enable the extensions iam_creator needs to be superuser. This was already a requirement Lunar had, but for people outside to actually use extensions you need to grant sufficient permissions to iam_creator. Or not use extensions field at all.

Currently extensions work in the way that we can enable extensions, but not disable them. This is mostly because we haven't committed ourselves to postgresql-controller being the only service that can manage extensions