Uploaded image for project: 'Debezium'
  1. Debezium
  2. DBZ-7111

Add service account parameter to DebeziumServer CRD

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Done
    • Icon: Minor Minor
    • 2.5.0.Beta1
    • None
    • debezium-operator
    • None

      Which use case/requirement will be addressed by the proposed feature?

      Deploying a debezium server instance with a pre-created, custom named SA provided by the user.

      Details:
      Currently it is not possible to use a SA named differently than the predefined one ('<DebeziumServer instance name>-sa').

      Additionally, it is not possible to use a pre-created SA for the debezium server instance, because in such case the operator fails with the message:
      "Operation cannot be fulfilled on serviceaccounts "<SA name>": the object has been modified".

      To be clear, it is currently possible to grant additional RBACs/other IAMs to the SA sued by the debezium server (you just apply the changes after creating the DbzServer and use the predefined name), but I think this will be a small change and a significant improvement for managed k8s clusters being run on public clouds.

              jcechace@redhat.com Jakub Čecháček
              gajewa Jan Gajewski-Tuttle (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: