Helm chart psmdb-operator 1.13.0 - Not aligned with the rest of 1.13.0

MongoDB Percona Operator for MongoDB
1

Chart 1.13.0 looks not supporting cluster wide deployment as well as Deployment rendered by chart is missing here under env variables

env:
            - name: LOG_STRUCTURED
              value: 'false'
             - name: DISABLE_TELEMETRY
               value: "false"
1 Like
2

About cluster-wide mode and according to Percona doc:

WATCH_NAMESPACE key-value pair in the env section should have value equal to a comma-separated list of the namespaces to be watched by the Operator, and the namespace in which the Operator resides (or just a blank string to make the Operator deal with all namespaces in a Kubernetes cluster).

On the other side, from Helm Chart comments:

set if you want to specify a namespace to watch
defaults to .Release.namespace if left blank
watchNamespace:

1 Like
3

Here is another major discrepancy: percona/psmdb-operator templates/role-binding.yaml does not manage ClusterRoleBinding but only RoleBinding

---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: service-account-{{ include "psmdb-operator.fullname" . }}
  {{- if .Values.watchNamespace }}
  namespace: {{ .Values.watchNamespace }}
  {{- end }}
  labels:
{{ include "psmdb-operator.labels" . | indent 4 }}
subjects:
- kind: ServiceAccount
  name: {{ include "psmdb-operator.fullname" . }}
  {{- if .Values.watchNamespace }}
  namespace: {{ .Release.Namespace }}
  {{- end }}
roleRef:
  {{- if .Values.watchNamespace }}
  kind: ClusterRole
  {{- else }}
  kind: Role
  {{- end }}
  name: {{ include "psmdb-operator.fullname" . }}
  apiGroup: rbac.authorization.k8s.io

But cw-rbac.yaml does

kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: service-account-percona-server-mongodb-operator
subjects:
- kind: ServiceAccount
  name: percona-server-mongodb-operator
  namespace: "psmdb-operator"
roleRef:
  kind: ClusterRole
  name: percona-server-mongodb-operator
  apiGroup: rbac.authorization.k8s.i
1 Like
4

Hi

Thank you for the detailed report. We preparing the necessary changes to the already published chart.
Please feel free your comments here

1 Like