diff --git a/k8s/data/schemas/grant-schema-permissions-job.yaml b/k8s/data/schemas/grant-schema-permissions-job.yaml index 33d345a..1813d5d 100644 --- a/k8s/data/schemas/grant-schema-permissions-job.yaml +++ b/k8s/data/schemas/grant-schema-permissions-job.yaml @@ -75,6 +75,9 @@ spec: # Grant for authentik database echo "Granting to authentik role in authentik database..." psql -h "$PGHOST" -U "$PGUSER" -d authentik << 'SQL' + -- Database-level permission (needed for CREATE SCHEMA) + GRANT CREATE ON DATABASE authentik TO authentik; + -- Schema-level permissions GRANT ALL ON SCHEMA public TO authentik; GRANT ALL ON ALL TABLES IN SCHEMA public TO authentik; GRANT ALL ON ALL SEQUENCES IN SCHEMA public TO authentik; @@ -85,6 +88,9 @@ spec: # Grant for temporal database echo "Granting to temporal role in temporal database..." psql -h "$PGHOST" -U "$PGUSER" -d temporal << 'SQL' + -- Database-level permission + GRANT CREATE ON DATABASE temporal TO temporal; + -- Schema-level permissions GRANT ALL ON SCHEMA public TO temporal; GRANT ALL ON ALL TABLES IN SCHEMA public TO temporal; GRANT ALL ON ALL SEQUENCES IN SCHEMA public TO temporal; @@ -95,6 +101,9 @@ spec: # Grant for temporal_visibility database echo "Granting to temporal role in temporal_visibility database..." psql -h "$PGHOST" -U "$PGUSER" -d temporal_visibility << 'SQL' + -- Database-level permission + GRANT CREATE ON DATABASE temporal_visibility TO temporal; + -- Schema-level permissions GRANT ALL ON SCHEMA public TO temporal; GRANT ALL ON ALL TABLES IN SCHEMA public TO temporal; GRANT ALL ON ALL SEQUENCES IN SCHEMA public TO temporal;