Skip to content

Fix database bootstrap role privileges - #58

Merged
jaydreyer merged 1 commit into
mainfrom
codex/fix-database-bootstrap
Aug 14, 2026
Merged

jaydreyer merged 1 commit into
mainfrom
codex/fix-database-bootstrap

Conversation

@jaydreyer

Copy link
Copy Markdown
Owner

Summary

  • run the privilege bootstrap atomically and temporarily assume the schema-owner role before changing its default privileges
  • remove temporary schema-owner membership after bootstrap
  • document the offline CloudShell VPC credential flow through the AWS console
  • add regression tests for role-switch ordering and transaction boundaries

Verification

  • uv run ruff check src migrations scripts tests
  • uv run ruff format --check src migrations scripts tests
  • uv run pytest tests/unit (144 passed)
  • live recovery verified both database roles authenticate over TLS with the expected schema-creation permissions

@jaydreyer
jaydreyer merged commit ecbae48 into main Aug 14, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant