postgres-operator icon indicating copy to clipboard operation
postgres-operator copied to clipboard

Use local Unix domain socket connection for password sync

Open mgomezch opened this issue 7 years ago • 1 comments

Instead of trying to use a superuser connection, the operator could exec psql in database pods to sync passwords, which would use a local connection through the PostgreSQL Unix domain socket. This would allow the operator to sync passwords even if the superuser secret is not consistent with a running cluster's state, which in turn would remove the need to preserve secrets upon cluster deletion, and simplify the process of restoring backups.

This may have a very low priority as the current workaround of not deleting secrets is effective.

mgomezch avatar Feb 05 '18 17:02 mgomezch

That would be a possible solution for #524.

kupson avatar Apr 09 '19 17:04 kupson