Sehrope Sarkuni

Option 2 is the direction I'd like to go with this. The decrypt operation would throw an Error if the HMAC does not match. Other ideas I'm considering are having...

Yes the next version will include an explicit version string as well. One trick we can use is that the current format is prefixed by the hex HMAC or hex...

That makes sense. Alpine images are slimmed down to contain the bare minimum so they likely do not have any of the build tools needed to compile the native driver...

-1 to adding more dependencies for something like that. If you want to test if the batching is done in a single command you could use defaults on the table...

I'm not aware of any functions for network traffic exposed by the server. There's also a bit of Heisenberg principle in asking the server for that information. You could use...

Pong! I took a look through and revised the approach. That `test-gss` stuff does a lot of config setup in the test itself (in Groovy) that would be better extracted...

I think we can still end up with something that works both locally in CI. Probably more robust as well. We just need to pull out the cluster creation into...

Oh and kudos to you for actually putting that thing together back when you did. Configuring Kerberos for anything is never fun, but configuring Postgres + Kerberos + dynamically changing...

Constructing the URI like that is incorrect. You need to escape the values via `encodeURIComponent(...): ``` const POSTGRES_URL = `postgresql://${encodeURIComponent(user)}:${encodeURIComponent(password)}@${host}:${port}/${encodeURIComponent(database)}`; ``` That allows you to handle arbitrary characters in those...

You would need to handle this yourself by creating your own version of `pool.query(...)` that uses the `pool.connect(...)` and tracks the time it took to retrieve a connection from the...