Fix pg sanitizer workflow connectivity

clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml

@@ -21,6 +21,7 @@ spec:
       containerSecurityContext:
         readOnlyRootFilesystem: false
       extendedConfiguration: |-
+        listen_addresses = '*'
         fsync = off
         full_page_writes = off
         synchronous_commit = off

infrastructure/pg-sanitizer/base/kustomization.yaml

@@ -2,5 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - serviceaccount.yaml
+  - rbac.yaml
   - workflowtemplate.yaml
   - cronworkflow.yaml

infrastructure/pg-sanitizer/base/rbac.yaml

@@ -0,0 +1,28 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: pg-sanitizer-workflowtaskresults
+  namespace: argo
+rules:
+  - apiGroups:
+      - argoproj.io
+    resources:
+      - workflowtaskresults
+    verbs:
+      - create
+      - get
+      - patch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: pg-sanitizer-workflowtaskresults
+  namespace: argo
+subjects:
+  - kind: ServiceAccount
+    name: pg-sanitizer
+    namespace: argo
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: pg-sanitizer-workflowtaskresults