onprem: 2.8.2

Author: mikhail-klimko

codefresh/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.8.1
+version: 2.8.2
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -18,10 +18,8 @@ annotations:
   # artifacthub.io/containsSecurityUpdates: "true"
   # supported kinds are added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
-    - kind: added
-      description: "Documentation about external MongoDB Atlas"
     - kind: fixed
-      description: "Fix postgresql seed job"
+      description: "Fix grantPrivileges function in seed job"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts

codefresh/README.md

@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.8.1](https://img.shields.io/badge/Version-2.8.1-informational?style=flat-square) ![AppVersion: 2.8.0](https://img.shields.io/badge/AppVersion-2.8.0-informational?style=flat-square)
+![Version: 2.8.2](https://img.shields.io/badge/Version-2.8.2-informational?style=flat-square) ![AppVersion: 2.8.0](https://img.shields.io/badge/AppVersion-2.8.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

codefresh/files/postgresSeedJobScript.sh

@@ -37,7 +37,19 @@ function createUser() {
 }
 
 function grantPrivileges() {
-    psql -c "GRANT ALL ON DATABASE ${1} TO ${POSTGRES_USER}"
+    local db=$1
+    echo "Granting privileges on $db to ${POSTGRES_USER}"
+    # Database-level privileges
+    psql -c "GRANT ALL ON DATABASE ${db} TO ${POSTGRES_USER}"
+    # Schema and object-level privileges
+    psql -d "${db}" -c "GRANT ALL ON SCHEMA public TO ${POSTGRES_USER}"
+    psql -d "${db}" -c "GRANT ALL ON ALL TABLES IN SCHEMA public TO ${POSTGRES_USER}"
+    psql -d "${db}" -c "GRANT ALL ON ALL SEQUENCES IN SCHEMA public TO ${POSTGRES_USER}"
+    psql -d "${db}" -c "GRANT ALL ON ALL FUNCTIONS IN SCHEMA public TO ${POSTGRES_USER}"
+    # Default privileges for future objects
+    psql -d "${db}" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO ${POSTGRES_USER}"
+    psql -d "${db}" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO ${POSTGRES_USER}"
+    psql -d "${db}" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON FUNCTIONS TO ${POSTGRES_USER}"
 }
 
 function runSeed() {