Admin 3217dca39f feat(db): dbctl — reconcile per-peer CONNECT authorization on the shared DB (M2 §4)
New lib/db/dbctl: SyncAuthorization runs after the DB starts (EnsureDatabaseRunning),
ensuring a LOGIN role + CONNECT grant per installed peer and revoking the stock
PUBLIC CONNECT grant on mTLS-armed databases; RevokeForService drops a peer's
CONNECT at uninstall. Admin executes over the in-container unix socket as
postgres (trust). Wired into ensureInfraRunning and UninstallContainer.
Includes unit tests + env-gated live integration test.
2026-08-19 00:22:23 +01:00
2026-07-29 01:36:09 +01:00
2026-07-29 01:36:09 +01:00
2026-08-04 22:02:50 +00:00
2026-07-29 01:33:35 +01:00
2026-07-29 01:33:35 +01:00
2026-07-29 01:36:09 +01:00

Maestro

Dcntrlized project coordinator service

S
Description
No description provided
Readme AGPL-3.0
618 KiB
Languages
Go 63.9%
TypeScript 32.3%
CSS 3.3%
HTML 0.3%
Dockerfile 0.2%