Releases: doctolib/terraform-provider-postgresql
Releases · doctolib/terraform-provider-postgresql
v2.26.0-beta1
Add support for GCP IAM impersonation (#26) Back port of PR: https://github.com/cyrilgdn/terraform-provider-postgresql/pull/448 --- Add support for GCP IAM service account impersonation ### Use cases The company has a centralized service account that is used for Terraform automation. However, such GSA should not be used to access the database directly where each database will have its own IAM DB users. This added an option to impersonate the database IAM user via the centralized GSA. As long as the centralized GSA has sufficient permissions to impersonate as the database IAM DB user, it can be used to perform database automation in Terraform. ### Testing ```hcl resource "google_sql_database_instance" "self" {} resource "google_sql_user" "admin" {} resource "google_service_account" "db_iam_admin" {} resource "google_sql_user" "iam_admin" { name = trimsuffix(google_service_account.db_iam_admin.email, ".gserviceaccount.com") instance = google_sql_database_instance.self.name type = "CLOUD_IAM_SERVICE_ACCOUNT" } resource "google_project_iam_member" "iam_admin_project_iam_members" { for_each = toset(["roles/cloudsql.client", "roles/cloudsql.instanceUser"]) member = google_service_account.db_iam_admin.member role = each.key } provider "postgresql" { scheme = "gcppostgres" host = google_sql_database_instance.self.connection_name username = trimsuffix(google_service_account.db_iam_admin.email, ".gserviceaccount.com") gcp_iam_impersonate_service_account = google_service_account.db_iam_admin.email port = 5432 superuser = false alias = "iamAdmin" } # it should work and able to apply resources using the IAM db user resource "postgresql_*" "*" { provider = postgresql.iamAdmin // * } ``` Co-authored-by: Michael Lin <[email protected]>
v2.25.0-beta4
replace exec with execContext (#21)
v2.25.0
replace exec with execContext (#21)
v2.25.0-beta3
Use exec for resource_postgresql_script
v2.25.0-beta2
fix cast to string error and refactor casts (#19)
v2.25.0-beta1
add postgresql_script resource (#18) Add a `postgresql_script` resource enabling to execute an array of sql queries.
v2.24.0
fix(PSRE-2088): error when setting owner on publication with "-"s (#17) It's impossible to set the owner of the publication when this one contains dashes in the name
v2.23.0
Fix goreleaser config (#16)
v2.22.1
use string instead
v2.22.0
add alterrole resource (#11) Taken from https://github.com/cyrilgdn/terraform-provider-postgresql/pull/211