orbatschow / kubepost Goto Github PK

This project was initially built with https://github.com/metacontroller/metacontroller

Although metacontroller proved to a good foundation the code is pretty complicated
and also it is pretty hard to get people contributing when using a non standard framework for an operator.

Therefore this repository should be migrated to a more suitable operator framework.

There are two options from my point of view as for today:

• kubebuilder
• operator-sdk

As both are pretty similar I think going with kubebuilder is the best option for now due to:

1. This operator does not need the extended features like helm or ansible.
2. kubebuilder is a Kubernetes SIG project and will most likely stay for a long time.

Aside from pushing a new foundation for this operator there is also a chance to
refactor existing CRDs, that we're limited by the usage of metacontroller.

This will most likely introduce some breaking changes which shall be documented within
this issue to help people with an easy migration to the new version.

It is already possible to grant privileges to a role on all tables in a schema.

When new tables are created the grant will only be effective once kubepost reconciled the resource.

It would be better if kubepost supported managing default privileges: https://www.postgresql.org/docs/current/sql-alterdefaultprivileges.html

The resyncPeriodSeconds in manifests/controller.yaml is currently set to 5 which means kubepost applies each resource in postgres every 5s.

This seems quite a bit excessive to me and causes unnecessary load on the Postgres server and log output.

Is there a reason it needs to be this short instead of something around 5min - 15min?