Skip to content

v0.45.1

Choose a tag to compare

@github-actions github-actions released this 25 Jun 13:44
· 4 commits to main since this release
3933659

Patch release: cloud-IAM database authentication for the migrations Job.

Bug Fixes

  • Migrations Job now supports cloud-IAM DB auth — v0.45.0 wired IAM+TLS into the API but not alembic/env.py, so the pre-upgrade migrations hook still used a static password and no TLS. On an IAM-only / TLS-required database that hook fails and blocks the rollout. The migrations Job now mints a per-connection IAM token and connects with TLS exactly like the API (gated on database.auth_mode; default static-password is unchanged), runs under the API's workload-identity service account, and mounts the database CA bundle for verify-full.

Status

Beta. Upgraders using database.auth_mode != password should take this release before relying on schema migrations under cloud-IAM auth.

Full Changelog: v0.45.0...v0.45.1