Ensure postgres user has the replication privilege (#1456)

DFE-Digital · Aug 8, 2024 · a10821a · a10821a
1 parent 1214243
commit a10821a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 4 deletions.
diff --git a/TeachingRecordSystem/db.sh b/TeachingRecordSystem/db.sh
@@ -5,4 +5,4 @@ ENV_VARS=$(env | grep DefaultConnection | sed 's/^ConnectionStrings__DefaultConn
 /^Password/ { print "export PGPASSWORD=" substr($0, 10) }
 ')
 eval "$ENV_VARS"
-psql
+psql "$@"
diff --git a/terraform/aks/app.tf b/terraform/aks/app.tf
@@ -24,13 +24,18 @@ resource "kubernetes_job" "migrations" {
         container {
           name    = "cli"
           image   = var.docker_image
-          command = ["trscli"]
-          args    = ["migrate-db", "--connection-string", "$(CONNECTION_STRING)"]
+          command = ["/bin/ash", "-c"]
+          args    = ["./db.sh -c 'alter user $(PG_USER) with replication;'", "trscli migrate-db --connection-string $(ConnectionStrings__DefaultConnection)"]
 
           env {
-            name  = "CONNECTION_STRING"
+            name  = "ConnectionStrings__DefaultConnection"
             value = module.postgres.dotnet_connection_string
           }
+
+          env {
+            name  = "PG_USER"
+            value = module.postgres.username
+          }
         }
 
         restart_policy = "Never"