Skip to content
This repository was archived by the owner on Apr 2, 2024. It is now read-only.

Create read and write access level roles and give grants #69

Merged
merged 6 commits into from
May 4, 2020
Merged

Create read and write access level roles and give grants #69

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
17978f6
Craete read and write access level roles and give grants
Apr 30, 2020
0933a9d
Remove excess GRANTS given to prom_writer
May 1, 2020
0e4b92a
Make CREATE ROLE idempotent
May 1, 2020
a329015
Remove EXECUTE GRANT for prom_writer on set_*_chunk_interval funcs
May 1, 2020
f38ff2c
Create prom_reader and add GRANTS in extension
May 1, 2020
3faa547
run generate on migration files
May 1, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion cmd/timescale-prometheus/main.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -156,7 +156,7 @@ func main() {
err = migrate(&cfg.pgmodelCfg)

if err != nil {
log.Error("msg", "Aborting startup because of migration error: %s", util.MaskPassword(err.Error()))
log.Error("msg", fmt.Sprintf("Aborting startup because of migration error: %s", util.MaskPassword(err.Error())))
os.Exit(1)
}
}
Expand Down
17 changes: 17 additions & 0 deletions extension/sql/timescale-prometheus.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,20 @@

SET LOCAL search_path TO DEFAULT;

DO $$
BEGIN
CREATE ROLE prom_reader;
EXCEPTION WHEN duplicate_object THEN
RAISE NOTICE 'role prom_reader already exists, skipping create';
RETURN;
END
$$;

CREATE OR REPLACE FUNCTION @[email protected]_support(internal) RETURNS INTERNAL
AS '$libdir/timescale_prometheus_extra', 'const_support'
LANGUAGE C IMMUTABLE STRICT;
GRANT EXECUTE ON FUNCTION @[email protected]_support(internal) TO prom_reader;


--wrapper around jsonb_each_text to give a better row_estimate
--for labels (10 not 100)
Expand All @@ -12,13 +23,15 @@ CREATE OR REPLACE FUNCTION @[email protected]_jsonb_each_text(js jsonb, OUT key
LANGUAGE internal
IMMUTABLE PARALLEL SAFE STRICT ROWS 10
AS $function$jsonb_each_text$function$;
GRANT EXECUTE ON FUNCTION @[email protected]_jsonb_each_text(jsonb) TO prom_reader;

--wrapper around unnest to give better row estimate (10 not 100)
CREATE OR REPLACE FUNCTION @[email protected]_unnest(label_array anyarray)
RETURNS SETOF anyelement
LANGUAGE internal
IMMUTABLE PARALLEL SAFE STRICT ROWS 10
AS $function$array_unnest$function$;
GRANT EXECUTE ON FUNCTION @[email protected]_unnest(anyarray) TO prom_reader;

--------------------- comparison functions ---------------------

Expand All @@ -31,6 +44,7 @@ AS $func$
$func$
LANGUAGE SQL STABLE PARALLEL SAFE
SUPPORT const_support;
GRANT EXECUTE ON FUNCTION @[email protected]_find_key_equal(label_key, pattern) TO prom_reader;

CREATE OR REPLACE FUNCTION @[email protected]_find_key_not_equal(key label_key, pattern pattern)
RETURNS matcher_negative
Expand All @@ -41,6 +55,7 @@ AS $func$
$func$
LANGUAGE SQL STABLE PARALLEL SAFE
SUPPORT const_support;
GRANT EXECUTE ON FUNCTION @[email protected]_find_key_not_equal(label_key, pattern) TO prom_reader;

CREATE OR REPLACE FUNCTION @[email protected]_find_key_regex(key label_key, pattern pattern)
RETURNS matcher_positive
Expand All @@ -51,6 +66,7 @@ AS $func$
$func$
LANGUAGE SQL STABLE PARALLEL SAFE
SUPPORT const_support;
GRANT EXECUTE ON FUNCTION @[email protected]_find_key_regex(label_key, pattern) TO prom_reader;

CREATE OR REPLACE FUNCTION @[email protected]_find_key_not_regex(key label_key, pattern pattern)
RETURNS matcher_negative
Expand All @@ -61,6 +77,7 @@ AS $func$
$func$
LANGUAGE SQL STABLE PARALLEL SAFE
SUPPORT const_support;
GRANT EXECUTE ON FUNCTION @[email protected]_find_key_not_regex(label_key, pattern) TO prom_reader;

CREATE OPERATOR @extschema@.== (
LEFTARG = label_key,
Expand Down
4 changes: 2 additions & 2 deletions pkg/pgmodel/migrations/migration_files_generated.go
View file
Open in desktop

Large diffs are not rendered by default.

Loading