percona / percona-server-mongodb-operator

Percona Operator for MongoDB
https://www.percona.com/doc/kubernetes-operator-for-psmongodb/
Apache License 2.0
321 stars 138 forks source link

Allow creation of backups without delete-backup finalizers #1549

Open dcharbonnier opened 4 months ago

dcharbonnier commented 4 months ago

Proposal

We should be able when enabling backups in PerconaServerMongoDb to choose the finalizers or at least to remove the delete-backup finalizer.

backup:
  enabled: true
  finalizers: false

or

backup:
  enabled: true
  finalizers: []

Use-Case

The credentials used to push a new backup (or even to retrieve them) should not be able to delete a backup as this would create a security bridge. Most likely no-one is even able to delete a backup as enabling object-lock should be a standard practice. This prevent the backup objects from being deleted without manually removing the useless finalizer in this case.

Is this a feature you are interested in implementing yourself?

No

Anything else?

No response