Skip to content

Harden Postgres bootstrap artifacts (#40) - #41

Merged
AntoineToussaint merged 6 commits into
mainfrom
issue-40-harden-delegated-runtime-access
Jul 30, 2026
Merged

Harden Postgres bootstrap artifacts (#40)#41
AntoineToussaint merged 6 commits into
mainfrom
issue-40-harden-delegated-runtime-access

Conversation

@AntoineToussaint

Copy link
Copy Markdown
Contributor

Closes #40.

Summary

  • Make configured NOLOGIN roles the exclusive DML authority of the managed writer, preserving the intended SET ROLE and RLS boundary.
  • Give migration Jobs content-addressed identities so immutable pod-template changes reconcile as new Jobs.
  • Select the pinned migration binary for the Docker target architecture.

Test plan

  • go test ./...
  • GOWORK=off go vet ./...
  • git diff --check

@AntoineToussaint
AntoineToussaint merged commit 3d2df46 into main Jul 30, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Harden Postgres bootstrap artifacts

1 participant