Comments (2)
This is similar to #57 in that ownership isn't managed properly, but it applies to schemas rather than tables.
Schema ownership isn't a problem for OWNER
users the way table ownership is, because ownership of the database allows all the same operations that ownership of the schema would allow. However, the problem I described above means that READ
and WRITE
users don't have any access at all to pre-existing schemas without running manual queries to set permissions for operator-managed roles.
from postgres-operator.
Hi @jerith
I think you face this issue because when the CR is applied on the existing database the Owner for the database changes but for the tables inside it doesn't. Which makes the database say permission denied for query.
I opened an issue for that #57
Also the Pull request which changes the Owner of existing Tables. Hence the Role created by Operator is the Owner of database plus all the tables inside it.
from postgres-operator.
Related Issues (20)
- Create a ConnectionString in the secret
- Add operator user to created roles by default
- Kustomization not using the new Google Image Repository
- Postgres User reconciller error loop when DB deleted manually - still having this problem in 1.2.1
- When postgres CR deleted before postgresusers CR it makes postgresusers finalizers to fail
- Schema creation failing HOT 15
- ARM support HOT 1
- Cannot create a database with customized `locale` and `encoding` options
- cannot terminate database with open connections
- Helm Chart should come with .image.tag set to an empty string in values.yaml
- The role-reader and role-writer do not have the appropriate permissions. HOT 8
- [Question]: Multiple RDS/Database instances HOT 1
- Add PostgresSchema CR
- Hash suffix to usernames
- [Feature] Allow connection with certificate
- POSTGRES_URI_ARGS applied to operator don't apply to generated secrets
- Failure to Cleanup Finalizers on Shutdown HOT 1
- postgres connection limits
- POSTGRES_URL should contain POSTGRES_URI_ARGS HOT 2
- RBAC is spooooooky HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from postgres-operator.