Copy pod_environment_secret to the cluster namespaces#1789
Conversation
|
The original author of this feature restricted it to the namespace for a reason. Not sure how I should feel about copying a secret with credentials around. @frittentheke fyi. |
Yes, I know, it's a Kubernetes limitations and couldn't be be broken.
Yes, totally agree with you, for some reasons security restrictions could be occured. But we could introduce an option inside the OperatorConfiguration to copy/not copy secretes form the single location to avoid creation them on every namespace where Postgresql has deployed. Also allowing to configure configmap/secret for each CR (#1794) is more preferred option. |
Fixes #1272