Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Different postgres user per application #39

Draft
wants to merge 6 commits into
base: main
Choose a base branch
from

Conversation

maartenweyns
Copy link
Member

@maartenweyns maartenweyns commented May 27, 2024

For security purposes, different applications should use different users in our Google Cloud postgres instance. The users should have the minimal required privileges within their database.

Before merging this PR, it should be verified that the users in the google cloud postgres instance have the correct permissions!

Tasks:

  • Create new users in Google Cloud postgres instance
    • events
    • dienst2
    • choice
    • listmonk
    • mand
    • areafiftylan
    • areafiftylan-legacy
  • Update credentials in the application's secret file
  • Update (reduce) permissions of the new user in the postgres instance
  • Merge and pray everything works? :)

@maartenweyns maartenweyns self-assigned this May 27, 2024
@maartenweyns
Copy link
Member Author

By default, Google Cloud creates new users with the cloudsqlsuperuser role, basically meaning root access. These roles should be changed by hand per user with a psql client.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant