zalando / zalando/postgres-operator

Connection pooler pgbouncer pod is missing imagePullSecrets

Open
#1,969 3 comments 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement good first issue
Dominant language
Go
Stars
5.2k
Forks
1.1k
Avg merge
2d 16h
Merged PRs (30d)
3

Description

Feature:

When adding connection pooler in the Postgresql CR then the pgbouncer deployment/pods do not get the imagePullSecrets specified in the Helm chart. The pgbouncer pod is using service account "default" and not the account specified in "pod_service_account_name".

Thereby it is not possible to run the connection pooler using a private container registry.

I suggest that the specified service account "pod_service_account_name" is used for the pgbouncer deployment like it is done for the postgresql statefulset. Thereby the imagePullSecrets defined in "pod_service_account_definition" will be used for the pgbouncer as well.

Alternative is to expand the connection pooler configuration with imagePullSecrets options, however, that would just make the usage more complex.

I recommend to reuse the existing service account created for the database pods.

General information:
We are running operator registry.opensource.zalan.do/acid/postgres-operator:v1.8.0 at Kubernetes on-premises

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Inspect the connection pooler deployment generation and compare its service-account handling with the PostgreSQL StatefulSet. Verify the behavior with a private container registry and confirm that the configured pod_service_account_name causes the pgbouncer pod to receive the imagePullSecrets from pod_service_account_definition.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, helm, kubernetes, postgresql
Domain
databases, devops, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.