@@ -38,10 +38,10 @@ nais postgres prepare appname --context dev-gcp --namespace dreamteam
38
38
39
39
## prepare
40
40
Prepare will prepare the postgres instance by connecting using the
41
- application credentials and modify the permissions on the public schema.
41
+ application credentials and by default modify the permissions on the public schema.
42
42
All IAM users in your GCP project will be able to connect to the instance.
43
43
44
- This operation is only required to run once for each postgresql instance.
44
+ This operation is only required to run once for each postgresql instance and schema .
45
45
46
46
``` bash
47
47
nais postgres prepare appname
@@ -54,9 +54,10 @@ nais postgres prepare appname
54
54
| Flag | Required | Short | Default | Description |
55
55
| -----------| ----------| -------| ------------------------------| ---------------------------------------------------------|
56
56
| all-privs | No | | false | If true ` ALL ` is granted, else only ` SELECT ` is granted |
57
+ | schema | No | | public | Name of the schema to grant access to |
57
58
58
59
## revoke
59
- Revokes the privileges given to the role cloudsqliamuser.
60
+ Revokes the privileges given to the role cloudsqliamuser in the given schema (default ` public ` ) .
60
61
Does not remove access for users to log in to the database or the ` roles/cloudsql.admin ` given to the user in GCP console.
61
62
62
63
This operation is only required to run once for each postgresql instance.
@@ -69,6 +70,10 @@ nais postgres revoke appname
69
70
| -------------| -----------| -------------------------------------------------------------|
70
71
| appname | Yes | Name of application owning the database |
71
72
73
+ | Flag | Required | Short | Default | Description |
74
+ | -----------| ----------| -------| --------| ------------------------------------------|
75
+ | schema | No | | public | Name of the schema to revoke access from |
76
+
72
77
## grant
73
78
Grant yourself access to a Postgres database.
74
79
0 commit comments