users

Documentation

Index

• func DropPgUser(user string, db *sql.DB) error
• type DefaultUserSyncStrategy
  • func (strategy DefaultUserSyncStrategy) ExecuteSyncRequests(requests []spec.PgSyncUserRequest, db *sql.DB) error
  • func (strategy DefaultUserSyncStrategy) ProduceSyncRequests(dbUsers spec.PgUserMap, newUsers spec.PgUserMap) []spec.PgSyncUserRequest

Functions

func DropPgUser

func DropPgUser(user string, db *sql.DB) error

DropPgUser to remove user created by the operator e.g. for password rotation

Types

type DefaultUserSyncStrategy

type DefaultUserSyncStrategy struct {
	PasswordEncryption   string
	RoleDeletionSuffix   string
	AdditionalOwnerRoles []string
}

DefaultUserSyncStrategy implements a user sync strategy that merges already existing database users with those defined in the manifest, altering existing users when necessary. It will never strips an existing roles of another role membership, nor it removes the already assigned flag (except for the NOLOGIN). TODO: process other NOflags, i.e. NOSUPERUSER correctly.

func (DefaultUserSyncStrategy) ExecuteSyncRequests

func (strategy DefaultUserSyncStrategy) ExecuteSyncRequests(requests []spec.PgSyncUserRequest, db *sql.DB) error

ExecuteSyncRequests makes actual database changes from the requests passed in its arguments.

func (DefaultUserSyncStrategy) ProduceSyncRequests

func (strategy DefaultUserSyncStrategy) ProduceSyncRequests(dbUsers spec.PgUserMap,
	newUsers spec.PgUserMap) []spec.PgSyncUserRequest

ProduceSyncRequests figures out the types of changes that need to happen with the given users.