1
0
mirror of https://github.com/Unleash/unleash.git synced 2025-09-24 17:51:14 +02:00

chore: AWS IAM DB auth migrator

This commit is contained in:
Nuno Góis 2025-09-04 15:51:25 +01:00
parent ccaafb3716
commit 264a5b8ea8
No known key found for this signature in database
GPG Key ID: 71ECC689F1091765
2 changed files with 2 additions and 16 deletions

View File

@ -14,14 +14,9 @@ export const getDBPasswordResolver = (db: IDBOption): PasswordResolver => {
region: db.awsRegion, region: db.awsRegion,
hostname: db.host, hostname: db.host,
port: db.port, port: db.port,
username: process.env.DATABASE_USERNAME || db.user, username: db.user,
}); });
return async () => { return async () => signer.getAuthToken();
console.log('[AWS RDS SIGNER] Getting token...');
const token = await signer.getAuthToken();
console.log(`[AWS RDS SIGNER] Got token: ${token}`);
return token;
};
} }
return async () => db.password; return async () => db.password;

View File

@ -9,20 +9,11 @@ export function createDb({
getLogger, getLogger,
}: Pick<IUnleashConfig, 'db' | 'getLogger'>): Knex { }: Pick<IUnleashConfig, 'db' | 'getLogger'>): Knex {
const logger = getLogger('db-pool.js'); const logger = getLogger('db-pool.js');
logger.info(
`createDb: iam=${Boolean(db.awsIamAuth)} host=${db.host} port=${db.port} db=${db.database} user=${process.env.DATABASE_USERNAME || db.user} ssl=${Boolean(db.ssl)}`,
);
const { password, ...logDb } = db;
logger.info(`createDb (DB): ${JSON.stringify(logDb, undefined, 2)}`);
return knex({ return knex({
client: 'pg', client: 'pg',
version: db.version, version: db.version,
connection: { connection: {
...db, ...db,
user: process.env.DATABASE_USERNAME || db.user,
application_name: db.applicationName, application_name: db.applicationName,
password: getDBPasswordResolver(db), password: getDBPasswordResolver(db),
}, },