@@ -9,12 +9,16 @@ import (
99
1010// PostgresUserSpec defines the desired state of PostgresUser
1111type PostgresUserSpec struct {
12- Role string `json:"role"`
13- Database string `json:"database"`
12+ // Name of the PostgresRole this user will be associated with
13+ Role string `json:"role"`
14+ // Name of the PostgresDatabase this user will be related to
15+ Database string `json:"database"`
16+ // Name of the secret to create with user credentials
1417 SecretName string `json:"secretName"`
1518 // +optional
1619 SecretTemplate map [string ]string `json:"secretTemplate,omitempty"` // key-value, where key is secret field, value is go template
1720 // +optional
21+ // List of privileges to grant to this user
1822 Privileges string `json:"privileges"`
1923 // +optional
2024 AWS * PostgresUserAWSSpec `json:"aws,omitempty"`
@@ -27,6 +31,8 @@ type PostgresUserSpec struct {
2731// PostgresUserAWSSpec encapsulates AWS specific configuration toggles.
2832type PostgresUserAWSSpec struct {
2933 // +optional
34+ // +kubebuilder:default=false
35+ // Enable IAM authentication for this user (PostgreSQL on AWS RDS only)
3036 EnableIamAuth bool `json:"enableIamAuth,omitempty"`
3137}
3238
@@ -37,7 +43,9 @@ type PostgresUserStatus struct {
3743 PostgresLogin string `json:"postgresLogin"`
3844 PostgresGroup string `json:"postgresGroup"`
3945 DatabaseName string `json:"databaseName"`
40- EnableIamAuth bool `json:"enableIamAuth"`
46+ // Reflects whether IAM authentication is enabled for this user.
47+ // +optional
48+ EnableIamAuth bool `json:"enableIamAuth"`
4149}
4250
4351// +kubebuilder:object:root=true
0 commit comments