IvanHunters 388e823916 fix(postgres): block archive_cleanup_command and recovery_end_command ...

Add archive_cleanup_command and recovery_end_command to the dangerous
parameters blocklist in db.yaml. Both are PostgreSQL shell-exec hooks
identical in threat model to archive_command/restore_command and must
not be settable by tenants.

Also update the BLOCKED list in values.schema.json, values.yaml, and
the embedded openAPISchema in cozyrds/postgres.yaml to reflect the
two new blocked parameters.

Additionally update the embedded openAPISchema in cozyrds/postgres.yaml
to allow integer values for postgresql.parameters (anyOf string|integer),
matching the fix already applied to values.schema.json.

Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>

2026-05-21 16:04:07 +05:00

..

_postgresjobs.tpl

add rq for pg

2025-06-11 22:48:09 +03:00

_resources.tpl

Don't overcommit memory or throttle CPU

2025-05-12 15:59:28 +03:00

_versions.tpl

[postgres] Add version management system with automated version updates

2025-12-01 23:56:55 +01:00

.gitkeep

Preapare release v0.0.1

2024-02-08 12:04:32 +01:00

backup-secret.yaml

feat(platform): implement backup strategy for postgres application

2026-05-07 13:12:54 +04:00

backup.yaml

feat(platform): implement backup strategy for postgres application

2026-05-07 13:12:54 +04:00

dashboard-resourcemap.yaml

bugfix fix pg LB frontend

2025-07-16 11:56:45 +03:00

db.yaml

fix(postgres): block archive_cleanup_command and recovery_end_command

2026-05-21 16:04:07 +05:00

external-svc.yaml

[platform] Autodetect RobotLB

2025-07-24 18:55:30 +03:00

init-job.yaml

feat(platform): implement backup strategy for postgres application

2026-05-07 13:12:54 +04:00

init-script.yaml

feat(platform): implement backup strategy for postgres application

2026-05-07 13:12:54 +04:00

regsecret.yaml

Preapare release v0.0.1

2024-02-08 12:04:32 +01:00