Skip to content

feat(gcp): support arbitrary Cloud SQL database flags on gcp-cloudsql-postgres #357

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Cre-eD merged 5 commits into from
Jul 3, 2026
+767 −121
Merged

feat(gcp): support arbitrary Cloud SQL database flags on gcp-cloudsql-postgres #357

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
ac17f11
feat(gcp): support arbitrary Cloud SQL database flags on gcp-cloudsql…
Cre-eD Jul 2, 2026
da206fa
test: expect empty DatabaseFlags map in resolved postgres fixtures
Cre-eD Jul 2, 2026
4dadeda
fix(gcp): honor databaseFlags on adoption path; regenerate schemas
Cre-eD Jul 2, 2026
0885b0b
fix(gcp): gate adopted-instance flag application on explicit database…
Cre-eD Jul 2, 2026
3af80bd
chore: nolint SA1019 on the MaxConnections compat shim
Cre-eD Jul 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion docs/docs/reference/supported-resources.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -886,7 +886,10 @@ resources:
version: "POSTGRES_14" # PostgreSQL version
tier: "db-f1-micro" # Instance tier
region: "us-central1" # GCP region
maxConnections: 100 # Maximum connections (optional)
maxConnections: 100 # Maximum connections (optional, deprecated: prefer databaseFlags)
databaseFlags: # Arbitrary Cloud SQL database flags (optional)
cloudsql.iam_authentication: "on" # e.g. enable IAM database authentication
log_min_duration_statement: "500" # max_connections here overrides maxConnections
deletionProtection: true # Enable deletion protection (optional)
queryInsightsEnabled: false # Enable query insights (optional)
queryStringLength: 1024 # Query string length limit (optional)
Expand All @@ -895,6 +898,8 @@ resources:
resourceName: "postgres-job-runner"
```

**Database flag removal semantics:** on freshly provisioned instances, deleting an entry from `databaseFlags` reverts that flag to its engine default on the next update (static flags restart the instance). On **adopted** instances (`adopt: true`), flags are only managed while `databaseFlags` is set — deleting the whole block re-enters drift protection and leaves the last-applied flags in place; to disable a flag, set it to its off value (e.g. `"off"`) instead of removing the line.

**Client Access:**

When this resource is used in a client stack via the `uses` section, Simple Container automatically injects environment variables and template placeholders for PostgreSQL connection details.
Expand Down
82 changes: 82 additions & 0 deletions docs/schemas/aws/cloudtrailsecurityalertsconfig.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,12 @@
"alerts": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"accessKeyCreation": {
"type": "boolean"
},
"anonymousProbes": {
"type": "boolean"
},
"cloudTrailTampering": {
"type": "boolean"
},
Expand All @@ -61,18 +67,88 @@
"failedConsoleLogins": {
"type": "boolean"
},
"guardDutyDisabled": {
"type": "boolean"
},
"iamPolicyChanges": {
"type": "boolean"
},
"kmsKeyDeletion": {
"type": "boolean"
},
"kmsKeyGrants": {
"type": "boolean"
},
"kmsKeyPolicy": {
"type": "boolean"
},
"lambdaUrlPublic": {
"type": "boolean"
},
"naclChanges": {
"type": "boolean"
},
"networkGatewayChanges": {
"type": "boolean"
},
"organizationsChanges": {
"type": "boolean"
},
"overrides": {
"additionalProperties": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"evaluationPeriods": {
"type": "integer"
},
"excludeInvokedBy": {
"items": {
"type": "string"
},
"type": "array"
},
"excludePrincipalIds": {
"items": {
"type": "string"
},
"type": "array"
},
"excludeUserArnGlobs": {
"items": {
"type": "string"
},
"type": "array"
},
"excludeUserArns": {
"items": {
"type": "string"
},
"type": "array"
},
"excludeUserNames": {
"items": {
"type": "string"
},
"type": "array"
},
"excludeUserTypes": {
"items": {
"type": "string"
},
"type": "array"
},
"period": {
"type": "integer"
},
"threshold": {
"type": "number"
}
},
"required": [],
"type": "object"
},
"type": "object"
},
"rootAccountUsage": {
"type": "boolean"
},
Expand All @@ -82,9 +158,15 @@
"s3BucketPolicyChanges": {
"type": "boolean"
},
"s3PublicAccessChanges": {
"type": "boolean"
},
"securityGroupChanges": {
"type": "boolean"
},
"securityHubDisabled": {
"type": "boolean"
},
"unauthorizedApiCalls": {
"type": "boolean"
},
Expand Down
3 changes: 3 additions & 0 deletions docs/schemas/aws/mysqlconfig.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,9 @@
"password": {
"type": "string"
},
"storageEncrypted": {
"type": "boolean"
},
"username": {
"type": "string"
}
Expand Down
3 changes: 3 additions & 0 deletions docs/schemas/aws/postgresconfig.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,9 @@
"password": {
"type": "string"
},
"storageEncrypted": {
"type": "boolean"
},
"username": {
"type": "string"
}
Expand Down
6 changes: 3 additions & 3 deletions docs/schemas/core/clientdescriptor.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -254,6 +254,9 @@
"required": {
"type": "boolean"
},
"softFail": {
"type": "boolean"
},
"tools": {
"items": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
Expand Down Expand Up @@ -295,9 +298,6 @@
"keyless": {
"type": "boolean"
},
"password": {
"type": "string"
},
"privateKey": {
"type": "string"
},
Expand Down
3 changes: 3 additions & 0 deletions docs/schemas/core/scandescriptor.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,9 @@
"required": {
"type": "boolean"
},
"softFail": {
"type": "boolean"
},
"tools": {
"items": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
Expand Down
6 changes: 3 additions & 3 deletions docs/schemas/core/securitydescriptor.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -235,6 +235,9 @@
"required": {
"type": "boolean"
},
"softFail": {
"type": "boolean"
},
"tools": {
"items": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
Expand Down Expand Up @@ -276,9 +279,6 @@
"keyless": {
"type": "boolean"
},
"password": {
"type": "string"
},
"privateKey": {
"type": "string"
},
Expand Down
3 changes: 0 additions & 3 deletions docs/schemas/core/signingdescriptor.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,6 @@
"keyless": {
"type": "boolean"
},
"password": {
"type": "string"
},
"privateKey": {
"type": "string"
},
Expand Down
15 changes: 11 additions & 4 deletions docs/schemas/core/stackconfigcompose.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -349,11 +349,18 @@
},
"https": {
"type": "boolean"
},
"siteExtraHelpers": {
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"extraHelpers",
"https"
"https",
"siteExtraHelpers"
],
"type": "object"
},
Expand Down Expand Up @@ -655,6 +662,9 @@
"required": {
"type": "boolean"
},
"softFail": {
"type": "boolean"
},
"tools": {
"items": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
Expand Down Expand Up @@ -696,9 +706,6 @@
"keyless": {
"type": "boolean"
},
"password": {
"type": "string"
},
"privateKey": {
"type": "string"
},
Expand Down
6 changes: 3 additions & 3 deletions docs/schemas/core/stackconfigsingleimage.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -348,6 +348,9 @@
"required": {
"type": "boolean"
},
"softFail": {
"type": "boolean"
},
"tools": {
"items": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
Expand Down Expand Up @@ -389,9 +392,6 @@
"keyless": {
"type": "boolean"
},
"password": {
"type": "string"
},
"privateKey": {
"type": "string"
},
Expand Down
Loading
Loading