Skip to content

v0.7.8

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Jun 01:37
· 36 commits to main since this release
v0.7.8
f9e8818

Highlights

v0.7.8 packages the new operator and CLI surfaces needed for cloud/provider-managed role workflows and on-demand reconciles.

Operator and CRD

  • Roles can now be marked external: true in PostgresPolicy. External roles remain usable in grants, schema ownership, default privileges, and memberships, but pgroles does not create, alter, drop, password-manage, or prune memberships granted from those provider-managed roles. This is aimed at Cloud SQL IAM users and groups whose login attributes and provider memberships are owned outside pgroles. (#124)
  • PostgresPolicy reconciles can now be requested immediately by changing the reconcile.pgroles.io/requestedAt annotation. The operator watches that annotation separately from spec generation and records successful handling in status.lastHandledReconcileAt. (#118)
  • The Helm chart and committed CRDs include both the external role marker and force-reconcile status/annotation support.

CLI and GitOps

  • pgroles reconcile annotates a Kubernetes PostgresPolicy and can optionally wait until the operator records the request as handled. (#118)
  • pgroles render-bundle composes a policy bundle into a deterministic flat manifest for CI/GitOps flows, with --check, --output, and --no-header support. (#122)

Docs and Examples

  • Added a validated multi-service PostgreSQL roles example covering bootstrap roles, service-owned schemas, migrations, team memberships, and cross-service isolation. (#112)
  • Refreshed the docs dependency stack with Next.js 16.2.7. (#110)

Validation

Release validation passed for the published tag, including CI, the GitHub Release workflow, and the Helm OCI chart release workflow.

Full Changelog: v0.7.7...v0.7.8

Assets 6
Loading