Timofei Larkin
97a3eaa82a
feat(postgres)!: mint tenant passwords through the credentials API
...
The chart generated every user's password at render time into
<release>-credentials, which tenants could read again at any time and
which Helm history kept for MaxHistory revisions, so a deployment whose
policy requires a credential shown once could not run PostgreSQL here.
The accounts move under CloudNativePG's managed roles, each pointing at
the account Secret the Cozystack API seeds, so the operator creates the
role with the SCRAM verifier the Secret holds and applies a changed
Secret live, and a password set inside PostgreSQL is reverted. Every
role is rendered as the init-script created it, because the operator
reverts an attribute that differs, revokes a parent role missing from
inRoles and clears a comment the spec leaves unset, while the
init-script still finds the roles to drop by that comment and by
membership in the marker. The init-script stops creating, passwording
and altering accounts, where it would be a second writer, and keeps the
two things the operator has no field for: the marker membership
narrowed to a record, and createrole_self_grant.
The refusal to adopt a role the chart did not mark moves into a
pre-upgrade hook, because the operator adopts a managed role within
seconds of the spec reaching it and the post-upgrade init-job would
find it adopted already. The definition declares the credentials block,
so the API seeds, serves and mints for the kind, and no longer selects
the credentials Secret, which the chart no longer renders or grants.
BREAKING CHANGE: PostgreSQL passwords are no longer readable from
<release>-credentials. A password is issued once, by a mint on the
account's Credential in core.cozystack.io, and replaced by the next
mint; deleting a Postgres application whose release is suspended is
refused. The conversion needs a platform variant with migrations
enabled.
Assisted-by: LLM
Signed-off-by: Timofei Larkin <lllamnyp@gmail.com >
2026-10-14 12:50:05 +02:00
..
2026-10-14 12:50:05 +02:00
2026-10-09 17:12:14 +03:00
2026-09-07 10:58:37 +03:00
2026-10-07 12:06:18 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 20:23:46 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-13 16:22:43 +03:00
2026-09-27 07:57:30 +03:00
2026-10-07 11:04:00 +03:00
2026-09-10 17:48:22 +05:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-09-21 12:20:22 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-09-22 17:10:05 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-09-28 14:29:17 +05:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-09-25 09:46:43 +05:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 20:11:22 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-09 16:57:43 +03:00
2026-09-28 01:32:37 +03:00
2026-10-07 11:04:00 +03:00
2026-10-05 14:15:37 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-08-05 17:37:04 +03:00
2026-10-07 11:04:00 +03:00
2026-10-12 12:00:15 +05:00
2026-10-10 21:47:42 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-02 03:29:15 +03:00
2026-08-28 15:29:29 +05:00
2026-09-26 15:06:42 +03:00
2026-10-09 02:04:39 +03:00
2026-09-05 13:19:17 +05:00
2026-09-05 13:19:17 +05:00
2026-10-03 01:42:38 +03:00
2026-10-07 19:37:25 +03:00
2026-10-03 01:42:38 +03:00
2026-10-03 01:42:38 +03:00
2026-10-09 16:57:43 +03:00
2026-10-01 02:19:17 +03:00
2026-09-05 13:19:17 +05:00
2026-10-07 04:38:06 +03:00
2026-09-05 13:19:17 +05:00
2026-08-23 19:38:49 +05:00
2026-10-09 02:04:40 +03:00
2026-08-07 23:53:40 +03:00
2026-09-05 14:51:06 +05:00
2026-10-07 11:04:00 +03:00
2026-09-15 23:34:52 +03:00
2026-10-07 16:14:34 +03:00
2026-10-06 16:28:51 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-01 19:37:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-08-12 18:45:22 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-12 09:54:52 +04:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-11 12:49:19 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-11 22:40:47 +08:00
2026-10-11 18:42:11 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-09-29 11:29:04 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-09-29 11:20:27 +03:00
2026-10-07 11:04:00 +03:00
2026-09-22 18:53:28 +05:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-08-12 18:42:58 +03:00
2026-10-09 16:57:43 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-09-27 16:58:28 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-08-14 18:37:58 +05:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-08-12 18:16:18 +02:00
2026-10-07 11:04:00 +03:00
2026-09-18 17:45:21 +03:00
2026-10-10 21:15:48 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-11 01:23:10 +02:00
2026-10-11 01:23:10 +02:00
2026-10-10 21:09:09 +03:00
2026-10-07 11:04:00 +03:00
2026-10-13 12:34:24 +04:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-10 21:15:48 +03:00
2026-10-10 21:15:48 +03:00
2026-10-09 17:12:14 +03:00
2026-10-09 17:12:14 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 15:41:05 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-10 20:37:53 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-13 18:07:35 +04:00
2026-10-13 18:07:35 +04:00
2026-10-13 12:34:24 +04:00
2026-10-13 12:34:24 +04:00
2026-10-07 11:04:00 +03:00
2026-10-02 11:02:36 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 11:04:00 +03:00
2026-10-07 15:41:06 +03:00
2026-10-07 11:04:00 +03:00
2026-09-26 16:08:25 +03:00
2026-09-26 17:53:13 +03:00
2026-10-07 11:04:00 +03:00
2026-09-28 01:32:36 +03:00
2026-10-07 11:04:00 +03:00
2026-10-02 11:02:18 +03:00