chore: stop using public schema/postgres user #851

New issue

Closed

opened 2026-03-28 04:29:13 +00:00 by mfreeman451 · 1 comment

mfreeman451 commented

2026-03-28 04:29:13 +00:00

Owner

Imported from GitHub.

Original GitHub issue: #2486
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/2486
Original created: 2026-01-24T04:07:00Z

Describe the bug

• Edited helm/serviceradar/templates/spire-postgres.yaml (+3 -0)
    48    (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'ALTER ROLE serviceradar SET search_path TO %s,ag_catalog');" $appSchema)
    49 +  (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'ALTER TABLE IF EXISTS %s.oban_jobs OWNER TO serviceradar');" $appSchema)
    50 +  (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'ALTER TABLE IF EXISTS %s.oban_peers OWNER TO serviceradar');" $appSchema)
    51 +  (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'ALTER SEQUENCE IF EXISTS %s.oban_jobs_id_seq OWNER TO serviceradar');" $appSchema)
    52    (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'GRANT USAGE ON SCHEMA ag_catalog TO serviceradar');")

We should be putting everything under the serviceradar user and platform schema

Not sure why all that oban schema setup stuff is in spire-postgres.yaml anyways, seems like that is the wrong place for that.

To Reproduce
Steps to reproduce the behavior:

Go to '...'
Click on '....'
Scroll down to '....'
See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

OS: [e.g. iOS]
Browser [e.g. chrome, safari]
Version [e.g. 22]

Smartphone (please complete the following information):

Device: [e.g. iPhone6]
OS: [e.g. iOS8.1]
Browser [e.g. stock browser, safari]
Version [e.g. 22]

Additional context
Add any other context about the problem here.

Imported from GitHub. Original GitHub issue: #2486 Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/2486 Original created: 2026-01-24T04:07:00Z --- **Describe the bug** ``` • Edited helm/serviceradar/templates/spire-postgres.yaml (+3 -0) 48 (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'ALTER ROLE serviceradar SET search_path TO %s,ag_catalog');" $appSchema) 49 + (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'ALTER TABLE IF EXISTS %s.oban_jobs OWNER TO serviceradar');" $appSchema) 50 + (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'ALTER TABLE IF EXISTS %s.oban_peers OWNER TO serviceradar');" $appSchema) 51 + (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'ALTER SEQUENCE IF EXISTS %s.oban_jobs_id_seq OWNER TO serviceradar');" $appSchema) 52 (printf "SELECT dblink_exec('dbname=serviceradar user=postgres', 'GRANT USAGE ON SCHEMA ag_catalog TO serviceradar');") ``` We should be putting everything under the `serviceradar` user and `platform` schema Not sure why all that oban schema setup stuff is in `spire-postgres.yaml` anyways, seems like that is the wrong place for that. **To Reproduce** Steps to reproduce the behavior: 1. Go to '...' 2. Click on '....' 3. Scroll down to '....' 4. See error **Expected behavior** A clear and concise description of what you expected to happen. **Screenshots** If applicable, add screenshots to help explain your problem. **Desktop (please complete the following information):** - OS: [e.g. iOS] - Browser [e.g. chrome, safari] - Version [e.g. 22] **Smartphone (please complete the following information):** - Device: [e.g. iPhone6] - OS: [e.g. iOS8.1] - Browser [e.g. stock browser, safari] - Version [e.g. 22] **Additional context** Add any other context about the problem here.

mfreeman451 commented

2026-03-28 04:29:14 +00:00

Author

Owner

Imported GitHub comment.

Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/2486#issuecomment-3793851906
Original created: 2026-01-24T05:27:13Z

Closed via update-cnpg-search-path-platform OpenSpec change: platform-first search_path enforced and bootstrap idempotency validated.

Imported GitHub comment. Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/2486#issuecomment-3793851906 Original created: 2026-01-24T05:27:13Z --- Closed via update-cnpg-search-path-platform OpenSpec change: platform-first search_path enforced and bootstrap idempotency validated.