feat: add wallet operatoer permission

Greenstand · Nov 18, 2023 · 64a9f32 · 64a9f32
1 parent 4c84bb5
commit 64a9f32
Show file tree

Hide file tree

Showing 9 changed files with 59 additions and 4 deletions.
diff --git a/database-grants/terraform/README.md b/database-grants/terraform/README.md
@@ -1,3 +1,8 @@
+# Prerequisites
+
+- Terraform 1.4.6 , please stick to this version for now, tested 1.6.x, it brings issue with the Dititalocean storage as backend
+
+
 # How to set up terraform
 
 Find your digitalocean spaces access key and secret key here: https://cloud.digitalocean.com/account/api/spaces?i=d79377

diff --git a/database-grants/terraform/dev/main.tf b/database-grants/terraform/dev/main.tf
@@ -81,3 +81,11 @@ module "keycloak_schema" {
     postgresql = postgresql.treetracker
   }
 }
+
+
+module "wallet_schema" {
+  source = "./schemas/wallet"
+  providers = {
+    postgresql = postgresql.treetracker
+  }
+}
diff --git a/database-grants/terraform/dev/other b/database-grants/terraform/dev/other
@@ -0,0 +1 @@
+../prod/other
diff --git a/database-grants/terraform/dev/schemas/wallet b/database-grants/terraform/dev/schemas/wallet
@@ -0,0 +1 @@
+../../prod/schemas/wallet/
diff --git a/database-grants/terraform/prod/extra/main.tf b/database-grants/terraform/prod/extra/main.tf
@@ -0,0 +1,24 @@
+resource "postgresql_grant" "wallet-operator-schema" {
+  database    = "treetracker"
+  role        = "wallet_operator"
+  schema      = "wallet"
+  object_type = "schema"
+  privileges  = ["USAGE", "CREATE"]
+}
+
+resource "postgresql_grant" "wallet-operator-table" {
+  database    = "treetracker"
+  role        = "wallet_operator"
+  schema      = "wallet"
+  object_type = "table"
+  privileges  = ["SELECT", "INSERT", "UPDATE", "DELETE"]
+}
+
+resource "postgresql_grant" "wallet-operator-seq" {
+  database    = "treetracker"
+  role        = "wallet_operator"
+  schema      = "wallet"
+  object_type = "sequence"
+  privileges  = ["USAGE", "SELECT"]
+
+}
diff --git a/database-grants/terraform/prod/extra/provider.tf b/database-grants/terraform/prod/extra/provider.tf
@@ -0,0 +1,8 @@
+terraform {
+  required_providers {
+    postgresql = {
+      source  = "cyrilgdn/postgresql"
+      version = "1.11.0"
+    }
+  }
+}
diff --git a/database-grants/terraform/prod/main.tf b/database-grants/terraform/prod/main.tf
@@ -90,3 +90,13 @@ module "keycloak_schema" {
     postgresql = postgresql.treetracker
   }
 }
+
+module "extra" {
+  source = "./extra"
+  providers = {
+    postgresql = postgresql.treetracker
+  }
+  depends_on = [
+    module.wallet_schema
+  ]
+}
diff --git a/database-grants/terraform/prod/prod.env.tfvars b/database-grants/terraform/prod/prod.env.tfvars
@@ -1,2 +1,2 @@
-port = "1111"
-host = "localhost"
+port = "25060"
+host = "treetracker-cluster-do-user-8540031-0.b.db.ondigitalocean.com"
diff --git a/database-grants/terraform/prod/schemas/wallet/main.tf b/database-grants/terraform/prod/schemas/wallet/main.tf
@@ -3,5 +3,3 @@ module "microservice_schema" {
   source = "./../../modules/microservice_schema"
   schema = "wallet"
 }
-
-
Original file line number	Diff line number	Diff line change
Expand Up		@@ -3,5 +3,3 @@ module "microservice_schema" {
		source = "./../../modules/microservice_schema"
		schema = "wallet"
		}