kubernetes/redxen/postgresql/TODO.md

Migration TODO's / Instructions for 13->17

• Stop all services except DB
• pg_dumpall from live DB
• Init DB + Load dump manually
• Correct permission set to be matching expectations:

CREATE ROLE "mail" LOGIN;
ALTER DATABASE "mail" OWNER TO "mail";

REASSIGN OWNED BY "postfix" TO "mail";
DROP OWNED BY "postfix";
DROP ROLE "postfix";

REASSIGN OWNED BY "dovecot" TO "mail";
DROP OWNED BY "dovecot";
DROP ROLE "dovecot";

CREATE ROLE "postfix" LOGIN;
GRANT "mail" TO "postfix";
CREATE ROLE "dovecot" LOGIN;
GRANT "mail" TO "dovecot";

ALTER DATABASE "gitea" OWNER TO "gitea";

CREATE ROLE "keycloak" LOGIN;
CREATE DATABASE "keycloak" OWNER "keycloak";

CREATE ROLE "exporter" LOGIN;
GRANT "postgres" TO "exporter";

Quicker alternative - Modify the dump as follows

• Delete any role creations, those are handled by the initdb
• Revert any database creations, those are handled by the dump
• Modify OWNER TO's to be correct

DROP DATABASE gitea;
DROP DATABASE grafana;
DROP DATABASE mail;
DROP DATABASE murmur;

< dump.sql sed \
    -e 's/OWNER TO postfix;/OWNER TO mail;/g' \
    -e 's/OWNER TO dovecot;/OWNER TO mail;/g' \
    -e 's/ALTER DATABASE gitea OWNER TO postgres;/ALTER DATABASE gitea OWNER TO gitea;/' \
    -e 's/ALTER DATABASE mail OWNER TO postgres;/ALTER DATABASE mail OWNER TO mail;/' \
| grep -v '^CREATE ROLE .*;$' | grep -v '^ALTER ROLE .*;$'