You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have the need to offer read-only access to a set of PostgreSQL databases on multiple DB instances. I'd ideally like to do this without needing to create users on each of the destination databases, and ideally we'd like to use short lived credentials, so a user could request access to a specific database & a new set of credentials could be created for the requested access, and that'll be available for an hour or day etc.
So, I'm wondering if supavisor could handle this scenario by supporting the following:
Securely store username / password configuration (possibly md5 based) for each Postgres DB instance, and configuring specific databases that we'd want to make available via supavisor
possibly overriding the db name (in case there are name conflicts with databases on different DB instances)
Support API or SQL based ways of creating & deleting users / credentials for clients to connect to supavisor. We'd want to allow supavisor to manage the auth so we don't have to create these users on all of the source DB instances.
We'd want to log each query run through supavisor for audit purposes, does supavisor allow logging of all queries?
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
I have the need to offer read-only access to a set of PostgreSQL databases on multiple DB instances. I'd ideally like to do this without needing to create users on each of the destination databases, and ideally we'd like to use short lived credentials, so a user could request access to a specific database & a new set of credentials could be created for the requested access, and that'll be available for an hour or day etc.
So, I'm wondering if supavisor could handle this scenario by supporting the following:
Thanks so much for the help. I'm trying trying to determine what tools is best to handle this scenario (currently looking at https://github.com/pgbouncer/pgbouncer, https://github.com/postgresml/pgcat, https://github.com/jeroenrinzema/psql-wire along with supavisor).
Beta Was this translation helpful? Give feedback.
All reactions