Difference between revisions of "Postgrest row level security via postgres"

From UVOO Tech Wiki
Jump to navigation Jump to search
Line 7: Line 7:
 
HINT:  The extension must first be installed on the system where PostgreSQL is running.
 
HINT:  The extension must first be installed on the system where PostgreSQL is running.
 
```
 
```
 +
 +
Let's enable debug and go in as root to add extension
 +
```
 +
tls:
 +
  enabled: true
 +
  autoGenerated: true
 +
primary:
 +
  extraEnvVars:
 +
    - name: POSTGRESQL_PGAUDIT_LOG
 +
      value: 'all, -misc'
 +
  containerSecurityContext:
 +
    enabled: true
 +
    # runAsUser: 1001
 +
    runAsUser: 0
 +
  service:
 +
    type: LoadBalancer
 +
    annotations:
 +
      metallb.universe.tf/address-pool: pool1
 +
diagnosticMode:
 +
  enabled: true
 +
```
 +
  
 
```
 
```

Revision as of 21:50, 27 April 2023

https://postgrest.org/en/stable/how-tos/sql-user-management-using-postgres-users-and-passwords.html#sql-user-management-using-postgres-users-and-passwords

postgres=# CREATE EXTENSION IF NOT EXISTS pgjwt WITH SCHEMA ext_pgjwt;
ERROR:  extension "pgjwt" is not available
DETAIL:  Could not open extension control file "/opt/bitnami/postgresql/share/extension/pgjwt.control": No such file or directory.
HINT:  The extension must first be installed on the system where PostgreSQL is running.

Let's enable debug and go in as root to add extension

tls:
  enabled: true
  autoGenerated: true
primary:
  extraEnvVars:
    - name: POSTGRESQL_PGAUDIT_LOG
      value: 'all, -misc'
  containerSecurityContext:
    enabled: true
    # runAsUser: 1001
    runAsUser: 0
  service:
    type: LoadBalancer
    annotations:
      metallb.universe.tf/address-pool: pool1
diagnosticMode:
  enabled: true
# apt-get install postgresql-server-dev-all
# cd /root/
/root # git clone https://github.com/michelp/pgjwt.git
cd pgjwt
/root/pgjwt# make install

output

/bin/mkdir -p '/opt/bitnami/postgresql/share/extension'
/bin/mkdir -p '/opt/bitnami/postgresql/share/extension'
/usr/bin/install -c -m 644 .//pgjwt.control '/opt/bitnami/postgresql/share/extension/'
/usr/bin/install -c -m 644 .//pgjwt--0.1.1.sql .//pgjwt--0.1.0--0.1.1.sql .//pgjwt--0.1.1--0.2.0.sql  '/opt/bitnami/postgresql/share/extension/'