gitops/patroni
1
0
Fork 0
mirror of https://github.com/outbackdingo/patroni.git synced 2026-08-25 14:53:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Disable pgaudit when creating users to not expose password (#3175)

Browse Source 
pgaudit could be added to shared_preload_libraries, but we don't check for it, because setting a custom GUC works in all cases.
This commit is contained in:
kviset
2024-10-09 11:57:38 +02:00
committed by GitHub
parent 8e46086335
commit 877acf2a55
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
patroni/postgresql/bootstrap.py
+2
View File
@@ -411,6 +411,7 @@ END;$$""".format(quote_literal(name), quote_ident(name, self._postgresql.connect
self._postgresql.query('SET log_min_duration_statement TO -1') self._postgresql.query('SET log_min_duration_statement TO -1')
self._postgresql.query("SET log_min_error_statement TO 'log'") self._postgresql.query("SET log_min_error_statement TO 'log'")
self._postgresql.query("SET pg_stat_statements.track_utility to 'off'") self._postgresql.query("SET pg_stat_statements.track_utility to 'off'")
self._postgresql.query("SET pgaudit.log TO none")
try: try:
self._postgresql.query(sql) self._postgresql.query(sql)
finally: finally:
@@ -418,6 +419,7 @@ END;$$""".format(quote_literal(name), quote_ident(name, self._postgresql.connect
self._postgresql.query('RESET log_min_duration_statement') self._postgresql.query('RESET log_min_duration_statement')
self._postgresql.query('RESET log_statement') self._postgresql.query('RESET log_statement')
self._postgresql.query('RESET pg_stat_statements.track_utility') self._postgresql.query('RESET pg_stat_statements.track_utility')
self._postgresql.query('RESET pgaudit.log')
def post_bootstrap(self, config: Dict[str, Any], task: CriticalTask) -> Optional[bool]: def post_bootstrap(self, config: Dict[str, Any], task: CriticalTask) -> Optional[bool]:
try: try: