CheckAccessPrivs checks to see if the ServiceAccount currently running the operator has the permissions defined for various resources as specified in the provided permissions map.

ConfigureInstallNamespaces is responsible for properly configuring up any namespaces provided for the installation of the Operator.

CopySecret copies a secret from the Operator namespace to target namespace.

CreateFakeNamespaceClient creates a fake namespace client for use with the "disabled" namespace operating mode.

CreateNamespace creates a new namespace that is owned by the Operator.

DeleteNamespace deletes the namespace specified.

GetCurrentNamespaceList returns the current list namespaces being managed by the current Operateor installation.

GetInitialNamespaceList returns an initial list of namespaces for the current Operator install.

GetNamespaceOperatingMode is responsible for returning the proper namespace operating mode for the current Operator install.

ReconcileRole reconciles a Role required by the operator in a target namespace.

ReconcileRoleBinding reconciles a RoleBinding required by the operator in a target namespace.

ReconcileServiceAccount reconciles a ServiceAccount required by the operator in a target namespace.

UpdateNamespace updates a new namespace to be owned by the Operator.

ValidateNamespaceNames validates one or more namespace names to ensure they are valid per Kubernetes naming requirements.

ValidateNamespacesWatched validates whether or not the namespaces provided are being watched by the current Operator installation.

NamespaceOperatingModeDisabled causes namespace capabilities to be disabled altogether.

NamespaceOperatingModeDynamic enables full dynamic namespace capabilities, in which the Operator can create, delete and update any namespaces within the Kubernetes cluster.

NamespaceOperatingModeReadOnly allows the Operator to listen for namespace events within the Kubernetetes cluster, and then create and run and/or remove controllers as namespaces are added and deleted.

ErrInvalidNamespaceName defines the error that is thrown when a namespace does not meet the requirements for naming set by Kubernetes.

ErrNamespaceNotWatched defines the error that is thrown when a namespace does not meet the requirements for naming set by Kubernetes.

PgoRole is used to populate the following Role templates: pgo-target-role.json pgo-backrest-role.json pgo-pg-role.json.

PgoRoleBinding is used to populate the following RoleBinding templates: pgo-target-role-binding.json pgo-backrest-role-binding.json pgo-pg-role-binding.json.

PgoServiceAccount is used to populate the following ServiceAccount templates: pgo-default-sa.json pgo-target-sa.json pgo-backrest-sa.json pgo-pg-sa.json.

NamespaceOperatingMode defines the different namespace operating modes for the Operator.