Revoke all privileges for PUBLIC role in postgres dbs
Change-Id: I98102bd9c72264c7e364b50e0683e4777b42b0e7
This commit is contained in:
parent
bf5f545c1c
commit
bc754e088e
|
@ -15,7 +15,7 @@ apiVersion: v1
|
||||||
appVersion: v1.0.0
|
appVersion: v1.0.0
|
||||||
description: OpenStack-Helm Helm-Toolkit
|
description: OpenStack-Helm Helm-Toolkit
|
||||||
name: helm-toolkit
|
name: helm-toolkit
|
||||||
version: 0.2.18
|
version: 0.2.19
|
||||||
home: https://docs.openstack.org/openstack-helm
|
home: https://docs.openstack.org/openstack-helm
|
||||||
icon: https://www.openstack.org/themes/openstack/images/project-mascots/OpenStack-Helm/OpenStack_Project_OpenStackHelm_vertical.png
|
icon: https://www.openstack.org/themes/openstack/images/project-mascots/OpenStack-Helm/OpenStack_Project_OpenStackHelm_vertical.png
|
||||||
sources:
|
sources:
|
||||||
|
|
|
@ -63,4 +63,7 @@ pgsql_superuser_cmd "SELECT * FROM pg_roles WHERE rolname = '$USER_DB_USER';" &&
|
||||||
|
|
||||||
#give permissions to user
|
#give permissions to user
|
||||||
pgsql_superuser_cmd "GRANT ALL PRIVILEGES ON DATABASE $USER_DB_NAME to $USER_DB_USER;"
|
pgsql_superuser_cmd "GRANT ALL PRIVILEGES ON DATABASE $USER_DB_NAME to $USER_DB_USER;"
|
||||||
|
|
||||||
|
#revoke all privileges from PUBLIC role
|
||||||
|
pgsql_superuser_cmd "REVOKE ALL ON DATABASE $USER_DB_NAME FROM PUBLIC;"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
|
@ -25,4 +25,5 @@ helm-toolkit:
|
||||||
- 0.2.16 Add manual mode to the created backup file name
|
- 0.2.16 Add manual mode to the created backup file name
|
||||||
- 0.2.17 Update db backup/restore retry for sending to remote
|
- 0.2.17 Update db backup/restore retry for sending to remote
|
||||||
- 0.2.18 Make Rabbit-init job more robust
|
- 0.2.18 Make Rabbit-init job more robust
|
||||||
|
- 0.2.19 Revoke all privileges for PUBLIC role in postgres dbs
|
||||||
...
|
...
|
||||||
|
|
Loading…
Reference in New Issue