Skip to content

Commit 78d02d6

Browse files
committed
docs: add IRSA instructions
Signed-off-by: Max Eisner <4730112+max-ae@users.noreply.github.com>
1 parent e0c8b64 commit 78d02d6

File tree

2 files changed

+17
-0
lines changed

2 files changed

+17
-0
lines changed

web/docs/migration.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,10 @@ As you can see, the contents of `barmanObjectStore` have been copied directly
103103
under the `configuration` field of the `ObjectStore` resource, using the same
104104
secret references.
105105

106+
### IAM Role for Service Account (IRSA)
107+
108+
If you use IRSA, you need to configure the `ObjectStore` to utilize the correct role as described in the [`Object Store Reference`](object_stores.md#iam-role-for-service-account-irsa).
109+
106110
## Step 2: Update the `Cluster` for plugin WAL archiving
107111

108112
Once the `ObjectStore` resource is in place, update the `Cluster` resource as

web/docs/object_stores.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -101,6 +101,19 @@ spec:
101101
[...]
102102
```
103103

104+
In addition, configure the `ObjectStore` to inherit permissions from the IAM role referenced in the service account:
105+
106+
```yaml
107+
apiVersion: barmancloud.cnpg.io/v1
108+
kind: ObjectStore
109+
metadata:
110+
[...]
111+
spec:
112+
configuration:
113+
s3Credentials:
114+
inheritFromIAMRole: true
115+
```
116+
104117
### S3 Lifecycle Policy
105118
106119
Barman Cloud uploads backup files to S3 but does not modify or delete them afterward.

0 commit comments

Comments
 (0)