arcodange-org/erp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'fix(chart): template Postgres owner role in update_ownership.sql for multi-env' (#13) from claude/fix-chart-owner-role into main

Browse Source
This commit was merged in pull request #13.
This commit is contained in:
arcodange
2026-06-28 22:30:54 +02:00
parent 354b40549d c0d5f2e144
commit cb17332314
4 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
chart/scripts/update_ownership.sql
View File

@@ -10,12 +10,12 @@ BEGIN
WHERE schemaname = 'public' WHERE schemaname = 'public'
LIMIT 1; LIMIT 1;
-- Si le propriétaire actuel est différent de erp_role -- Si le propriétaire actuel est différent de {{ .Values.db.ownerRole }}
IF current_schema_owner <> 'erp_role' THEN IF current_schema_owner <> '{{ .Values.db.ownerRole }}' THEN
-- Construire et exécuter la requête REASSIGN OWNED BY -- Construire et exécuter la requête REASSIGN OWNED BY
EXECUTE format('REASSIGN OWNED BY %I TO %I', current_schema_owner, 'erp_role'); EXECUTE format('REASSIGN OWNED BY %I TO %I', current_schema_owner, '{{ .Values.db.ownerRole }}');
RAISE NOTICE 'Ownership of all objects in schema "public" has been reassigned from % to %', current_schema_owner, 'erp_role'; RAISE NOTICE 'Ownership of all objects in schema "public" has been reassigned from % to %', current_schema_owner, '{{ .Values.db.ownerRole }}';
ELSE ELSE
RAISE NOTICE 'No change needed; the owner of schema "public" is already %', 'erp_role'; RAISE NOTICE 'No change needed; the owner of schema "public" is already %', '{{ .Values.db.ownerRole }}';
END IF; END IF;
END $$; END $$;

2
chart/templates/scripts-config.yaml
View File

@@ -7,4 +7,4 @@ data:
{{- .Files.Get "scripts/update_conf_db_credentials.sh" | nindent 4 }} {{- .Files.Get "scripts/update_conf_db_credentials.sh" | nindent 4 }}
update_table_ownership.sql: | update_table_ownership.sql: |
{{- .Files.Get "scripts/update_ownership.sql" | nindent 4 }} {{- tpl (.Files.Get "scripts/update_ownership.sql") . | nindent 4 }}

1
chart/values-sandbox.yaml
View File

@@ -16,6 +16,7 @@ host: erp-sandbox.arcodange.lab
db: db:
name: erp-sandbox name: erp-sandbox
ownerRole: erp_sandbox_role
vault: vault:
k8sRole: erp-sandbox k8sRole: erp-sandbox

1
chart/values.yaml
View File

@@ -16,6 +16,7 @@ host: erp.arcodange.lab # internal hostname for this instance
db: db:
name: erp # PostgreSQL database name (matches factory tfvars) name: erp # PostgreSQL database name (matches factory tfvars)
ownerRole: erp_role # Postgres owner role; snake-case <app>_role for prod / <app>_<env>_role for non-prod (matches factory/postgres/iac)
vault: vault:
k8sRole: erp # VaultAuth role (postgres/iac issues this per instance) k8sRole: erp # VaultAuth role (postgres/iac issues this per instance)