Uploaded image for project: 'Couchbase Kubernetes'
  1. Couchbase Kubernetes
  2. K8S-2016

Add Role: Sync Gateway (mobile_sync_gateway) to Autonomous Operator

    XMLWordPrintable

Details

    • 12: Logging,Indexing, PE/SB
    • 1

    Description

      The standard Sync Gateway documentation recommends using the role: Sync Gateway (mobile_sync_gateway) for the Sync Gateway service account, and mentions that the bucket_full_access permission is being deprecated: https://docs.couchbase.com/sync-gateway/current/start/gs-sgw-prereqs.html#step-2create-rbac-user

       

      However, the CBAO documentation still states to use the bucket_full_access permission for the sync gateway: https://docs.couchbase.com/operator/current/tutorial-sync-gateway.html

      The CouchbaseGroup resource also does not list the mobile_sync_gateway permission as an available option: https://docs.couchbase.com/operator/current/reference-couchbasegroup.html#spec-roles-name

       

      I have tested a CouchbaseGroup resource with this permission defined in the manifest, and it is rejected by the DAC.

      Attachments

        For Gerrit Dashboard: K8S-2016
        # Subject Branch Project Status CR V

        Activity

          simon.murray Simon Murray added a comment -

          Note this role is 6.6+ only, and as we have to support 6.5 too we need to be careful.  I guess we can just add it to the allowed enumerations in the CRD and document that it will fail on 6.5.

          simon.murray Simon Murray added a comment - Note this role is 6.6+ only, and as we have to support 6.5 too we need to be careful.  I guess we can just add it to the allowed enumerations in the CRD and document that it will fail on 6.5.

          People

            simon.murray Simon Murray
            robbycuenotcouchbase Robby Cuenot
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty