fix: grant predefined roles post-upgrade

soedirgo · soedirgo · commit 19ac49312771 · 2024-10-31T13:57:30.000+07:00
diff --git a/ansible/files/admin_api_scripts/pg_upgrade_scripts/common.sh b/ansible/files/admin_api_scripts/pg_upgrade_scripts/common.sh
@@ -541,16 +541,6 @@ $$;
 
 alter database postgres connection limit -1;
 
--- #incident-2024-09-12-project-upgrades-are-temporarily-disabled
-do $$
-begin
-  if exists (select from pg_authid where rolname = 'pg_read_all_data') then
-    execute('grant pg_read_all_data to postgres');
-  end if;
-end
-$$;
-grant pg_signal_backend to postgres;
-
 set session authorization supabase_admin;
 drop role supabase_tmp;
 commit;
diff --git a/ansible/files/admin_api_scripts/pg_upgrade_scripts/complete.sh b/ansible/files/admin_api_scripts/pg_upgrade_scripts/complete.sh
@@ -78,6 +78,9 @@ EOF
 
         run_sql -c "$RECREATE_PG_CRON_QUERY"
     fi
+
+    # #incident-2024-09-12-project-upgrades-are-temporarily-disabled
+    run_sql -c "grant pg_read_all_data, pg_signal_backend to postgres"
 }
 
 function complete_pg_upgrade {

Original file line number	Diff line number	Diff line change
`@@ -78,6 +78,9 @@ EOF`
`78`	`78`
`79`	`79`	`run_sql -c "$RECREATE_PG_CRON_QUERY"`
`80`	`80`	`fi`
	`81`	`+`
	`82`	`+ # #incident-2024-09-12-project-upgrades-are-temporarily-disabled`
	`83`	`+ run_sql -c "grant pg_read_all_data, pg_signal_backend to postgres"`
`81`	`84`	`}`
`82`	`85`
`83`	`86`	`function complete_pg_upgrade {`