Google Cloud Storage Credentials about postgres-operator HOT 6 CLOSED

@rporres take a look the PR #535. Another user who runs the operator on bare metal and came up with a solution.

from postgres-operator.

After a bit of experimentation on GKE, it seems that if the GOOGLE_APPLICATION_CREDENTIALS environmental variable is not set, the gcloud sdk in the spilo container defaults to using the gcloud service account associated with the kubernetes service account for the pod. This makes the feature to allow the mounting of the gcloud credentials less critical as the default behaviour is similar to --aws-instance-profile as long as the RBAC and Google Cloud service accounts are set up properly.

from postgres-operator.

We use the operator to deploy postgres in bare metal kubernetes. We're interested in this as we keep our infra backups in GCE. Unfortunately @michailbrynard's workaround won't work in our case as there are no gcloud service account associated to the kubernetes service account for the pod. Any suggestions about how to proceed? We're happy to contribute if needed, but since we're starting using the operator guidance would be more than welcomed.

from postgres-operator.

Sounds like the operator should take care of this, similar to it already specifying the IAM role in an AWS environment. We can probably take a quick look at this, as we know from the helm chart how this should look like and would make the operator more attractive to non AWS users.

from postgres-operator.

Yes, that would be great for users running on GKE!

from postgres-operator.

👍

from postgres-operator.