tmp

supabase · Feb 4, 2025 · 9c7cace · 9c7cace
1 parent f7e8474
commit 9c7cace
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/ansible/files/postgresql_extension_custom_scripts/supabase_vault/after-create.sql b/ansible/files/postgresql_extension_custom_scripts/supabase_vault/after-create.sql
@@ -1,3 +1,3 @@
 grant usage on schema vault to postgres with grant option;
-grant select on vault.secrets, vault.decrypted_secrets to postgres with grant option;
+grant select, delete on vault.secrets, vault.decrypted_secrets to postgres with grant option;
 grant execute on function vault.create_secret, vault.update_secret, vault._crypto_aead_det_decrypt to postgres with grant option;
diff --git a/ansible/vars.yml b/ansible/vars.yml
@@ -8,8 +8,8 @@ postgres_major:
 
 # Full version strings for each major version
 postgres_release:
-  postgresorioledb-17: "17.0.1.021-orioledb-vault-6"
-  postgres15: "15.8.1.031-vault-6"
+  postgresorioledb-17: "17.0.1.021-orioledb-vault-7"
+  postgres15: "15.8.1.031-vault-7"
 
 # Non Postgres Extensions
 pgbouncer_release: "1.19.0"

diff --git a/migrations/db/migrations/20221207154255_create_vault.sql b/migrations/db/migrations/20221207154255_create_vault.sql
@@ -9,7 +9,7 @@ BEGIN
     -- for some reason extension custom scripts aren't run during AMI build, so
     -- we manually run it here
     grant usage on schema vault to postgres with grant option;
-    grant select on vault.secrets, vault.decrypted_secrets to postgres with grant option;
+    grant select, delete on vault.secrets, vault.decrypted_secrets to postgres with grant option;
     grant execute on function vault.create_secret, vault.update_secret, vault._crypto_aead_det_decrypt to postgres with grant option;
   END IF;
 END $$;