Function Environment

internal/postgres/config.go:220–264

Environment returns the environment variables required to invoke PostgreSQL utilities.

(cluster *v1beta1.PostgresCluster)

// Environment returns the environment variables required to invoke PostgreSQL
// utilities.
func Environment(cluster *v1beta1.PostgresCluster) []corev1.EnvVar {
	return []corev1.EnvVar{
		// - https://www.postgresql.org/docs/current/reference-server.html
		{
			Name:  "PGDATA",
			Value: ConfigDirectory(cluster),
		},

		// - https://www.postgresql.org/docs/current/libpq-envars.html
		{
			Name:  "PGHOST",
			Value: SocketDirectory,
		},
		{
			Name:  "PGPORT",
			Value: fmt.Sprint(*cluster.Spec.Port),
		},
		// Setting the KRB5_CONFIG for kerberos
		// - https://web.mit.edu/kerberos/krb5-current/doc/admin/conf_files/krb5_conf.html
		{
			Name:  "KRB5_CONFIG",
			Value: configMountPath + "/krb5.conf",
		},
		// In testing it was determined that we need to set this env var for the replay cache
		// otherwise it defaults to the read-only location `/var/tmp/`
		// - https://web.mit.edu/kerberos/krb5-current/doc/basic/rcache_def.html#replay-cache-types
		{
			Name:  "KRB5RCACHEDIR",
			Value: "/tmp",
		},
		// This allows a custom CA certificate to be mounted for Postgres LDAP
		// authentication via spec.config.files.
		// - https://wiki.postgresql.org/wiki/LDAP_Authentication_against_AD
		//
		// When setting the TLS_CACERT for LDAP as an environment variable, 'LDAP'
		// must be appended as a prefix.
		// - https://www.openldap.org/software/man.cgi?query=ldap.conf
		//
		// Testing with LDAPTLS_CACERTDIR did not work as expected during testing.
		{
			Name:  "LDAPTLS_CACERT",
			Value: configMountPath + "/ldap/ca.crt",
		},
	}
}

// ShellPath returns a POSIX shell command that prepends typical Postgres executable paths to the PATH variable.
func ShellPath(postgresVersion int32) string {