Class: Seira::Db::AlterProxyuserRoles

Inherits:
Object
  • Object
show all
Includes:
Commands
Defined in:
lib/seira/db/alter_proxyuser_roles.rb

Instance Attribute Summary collapse

Instance Method Summary collapse

Methods included from Commands

#gcloud, gcloud, kubectl, #kubectl

Constructor Details

#initialize(app:, action:, args:, context:) ⇒ AlterProxyuserRoles

Returns a new instance of AlterProxyuserRoles.



8
9
10
11
12
13
14
15
16
 
# File 'lib/seira/db/alter_proxyuser_roles.rb', line 8

def initialize(app:, action:, args:, context:)
  if args.length != 2
    puts 'Specify db name and root password as the positional arguments'
    exit(1)
  end

  @name = args[0]
  @root_password = args[1]
end

Instance Attribute Details

#name ⇒ Object (readonly)

Returns the value of attribute name.



6
7
8
 
# File 'lib/seira/db/alter_proxyuser_roles.rb', line 6

def name
  @name
end

#root_password ⇒ Object (readonly)

Returns the value of attribute root_password.



6
7
8
 
# File 'lib/seira/db/alter_proxyuser_roles.rb', line 6

def root_password
  @root_password
end

Instance Method Details

#run ⇒ Object 



18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
 
# File 'lib/seira/db/alter_proxyuser_roles.rb', line 18

def run
  # Connect to the instance and remove some of the default group memberships and permissions
  # from proxyuser, leaving it with only what it needs to be able to do
  expect_script = <<~BASH
    set timeout 90
    spawn gcloud sql connect #{name}
    expect "Password for user postgres:"
    send "#{root_password}\\r"
    expect "postgres=>"
    send "ALTER ROLE proxyuser NOCREATEDB NOCREATEROLE;\\r"
    expect "postgres=>"
  BASH
  if system("expect <<EOF\n#{expect_script}EOF")
    puts "Successfully removed unnecessary permissions from proxyuser"
  else
    puts "Failed to remove unnecessary permissions from proxyuser."
    puts "You may need to whitelist the correct IP in the gcloud UI."
    puts "You can get the correct IP from https://www.whatismyip.com/"
    puts "Make sure to remove it from the whitelist after successfully running db alter-proxyuser-roles"
    exit(1)
  end
end