tmp

Author: soedirgo

ansible/files/postgresql_extension_custom_scripts/supabase_vault/after-create.sql

@@ -1,3 +1,3 @@
 grant usage on schema vault to postgres with grant option;
-grant select on vault.secrets, vault.decrypted_secrets to postgres with grant option;
+grant select, delete on vault.secrets, vault.decrypted_secrets to postgres with grant option;
 grant execute on function vault.create_secret, vault.update_secret, vault._crypto_aead_det_decrypt to postgres with grant option;

ansible/vars.yml

@@ -8,8 +8,8 @@ postgres_major:
 
 # Full version strings for each major version
 postgres_release:
-  postgresorioledb-17: "17.0.1.021-orioledb-vault-6"
-  postgres15: "15.8.1.031-vault-6"
+  postgresorioledb-17: "17.0.1.021-orioledb-vault-7"
+  postgres15: "15.8.1.031-vault-7"
 
 # Non Postgres Extensions
 pgbouncer_release: "1.19.0"

migrations/db/migrations/20221207154255_create_vault.sql

@@ -9,7 +9,7 @@ BEGIN
     -- for some reason extension custom scripts aren't run during AMI build, so
     -- we manually run it here
     grant usage on schema vault to postgres with grant option;
-    grant select on vault.secrets, vault.decrypted_secrets to postgres with grant option;
+    grant select, delete on vault.secrets, vault.decrypted_secrets to postgres with grant option;
     grant execute on function vault.create_secret, vault.update_secret, vault._crypto_aead_det_decrypt to postgres with grant option;
   END IF;
 END $$;