diff --git a/kustomize/pgadmin/README.md b/kustomize/pgadmin/README.md new file mode 100644 index 00000000..eaa0007d --- /dev/null +++ b/kustomize/pgadmin/README.md @@ -0,0 +1,8 @@ +# Pgadmin considerations + +Starting with **PGO v5.5.0** the user interface has its own CRD. You have better control and can fully customize your user interface via PGAdmin.spec.config.settings as demonstrated in the included pgadmin.yaml + +For more architectural insights please refer to [docs](https://access.crunchydata.com/documentation/postgres-operator/latest/architecture/namespace-scoped-pgadmin-4) + +For a list of possible pgadmin settings refer to [pgadmin docs](https://www.pgadmin.org/docs/pgadmin4/latest/config_py.html) + diff --git a/kustomize/pgadmin/kustomization.yaml b/kustomize/pgadmin/kustomization.yaml new file mode 100644 index 00000000..d0724ecd --- /dev/null +++ b/kustomize/pgadmin/kustomization.yaml @@ -0,0 +1,8 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +namespace: postgres-operator + +resources: +- pgadmin.yaml + diff --git a/kustomize/pgadmin/pgadmin.yaml b/kustomize/pgadmin/pgadmin.yaml new file mode 100644 index 00000000..27f0a4b1 --- /dev/null +++ b/kustomize/pgadmin/pgadmin.yaml @@ -0,0 +1,35 @@ +apiVersion: postgres-operator.crunchydata.com/v1beta1 +kind: PGAdmin +metadata: + name: rhino + namespace: postgres-operator +spec: + dataVolumeClaimSpec: + accessModes: + - "ReadWriteOnce" + resources: + requests: + storage: 1Gi + serverGroups: + - name: supply + # An empty selector selects all postgresclusters in the Namespace + postgresClusterSelector: {} + config: + settings: + AUTHENTICATION_SOURCES: ['oauth2', 'internal'] + OAUTH2_CONFIG: + - OAUTH2_NAME: "google" + OAUTH2_DISPLAY_NAME: "Google" + OAUTH2_CLIENT_ID: "XXXXXXX" + OAUTH2_CLIENT_SECRET: "XXXXXXX" + OAUTH2_TOKEN_URL: "https://oauth2.googleapis.com/token" + OAUTH2_AUTHORIZATION_URL: "https://accounts.google.com/o/oauth2/auth" + OAUTH2_API_BASE_URL: "https://openidconnect.googleapis.com/v1/" + OAUTH2_SERVER_METADATA_URL: "https://accounts.google.com/.well-known/openid-configuration" + OAUTH2_SCOPE: "openid email profile" + OAUTH2_USERINFO_ENDPOINT: "userinfo" + OAUTH2_SSL_CERT_VERIFICATION: "False" # for testing purposes + OAUTH2_BUTTON_COLOR: "red" + OAUTH2_AUTO_CREATE_USER : "True" + DEBUG: "True" # for testing purposes + SERVER_MODE: "True"