Re: Possibility to disable `ALTER SYSTEM`

Hi Joel, On Wed, 7 Feb 2024 at 10:00, Joel Jacobson wrote: > On Fri, Sep 8, 2023, at 16:17, Gabriele Bartolini wrote: > > ``` > > postgres=# ALTER SYSTEM SET wal_level TO minimal; > > ERROR: could not open file "postgresql.auto.conf": Permission denie

Re: Possibility to disable `ALTER SYSTEM`

me experiments enabling the change in the configuration file, but wasn't sure in which `config_group` to place the 'enable_alter_system` GUC, based on the src/include/utils/guc_tables.h. Any thoughts/hints? Cheers, Gabriele -- Gabriele Bartolini Vice President, Cloud Native at EDB enterprisedb.com

Re: Possibility to disable `ALTER SYSTEM`

trol. Of course you can bypass it using > COPY PROGRAM etc., but then you *know* that you are *bypassing* > something. If you just see ALTER SYSTEM, you'll think, "that is > obviously the appropriate tool", and there is no generally accepted way > to communicate t

Re: Possibility to disable `ALTER SYSTEM`

Hi, I am sending an updated patch, and submitting this to the next commit fest, as I still believe this could be very useful. Thanks, Gabriele On Thu, 7 Sept 2023 at 21:51, Gabriele Bartolini < gabriele.bartol...@enterprisedb.com> wrote: > Hi everyone, > > I would like to

Re: Extend pgbench partitioning to pgbench_history

story is not). > > I don't have a strong opinion about this, but I also can't think of a > reason to want to create partitions for pgbench_accounts but leave out > pgbench_history. > > > From ba8f507b126a9c5bd22dd40bb8ce0c1f0c43ac59 Mon Sep 17 00:00:00 2001 > > From: Gabrie

Re: Extend pgbench partitioning to pgbench_history

Please discard the previous patch and use this one (it had a leftover comment from an initial attempt to limit this to hash case). Thanks, Gabriele On Thu, 30 Nov 2023 at 11:29, Gabriele Bartolini < gabriele.bartol...@enterprisedb.com> wrote: > Hi there, > > While benchmarkin

Extend pgbench partitioning to pgbench_history

you think. Thanks, Gabriele -- Gabriele Bartolini Vice President, Cloud Native at EDB enterprisedb.com 0001-Include-pgbench_history-in-partitioning-method-for-p.patch Description: Binary data

Re: Possibility to disable `ALTER SYSTEM`

see your extension, I would still like to understand why Postgres itself shouldn't solve this basic requirement coming from the configuration management driven/Kubernetes space. It shouldn't be a big deal to have such an option, either as a startup one or a GUC, should it? Thanks, Gabriele -- Gabrie

Re: Possibility to disable `ALTER SYSTEM`

that's loaded at > system start from inside the data directory or as the PG superuser, > which my proposal above would support- just configure in postgresql.conf > to not include any of the alter-system or generated config. The actual > postgresql.conf could be owned by root then too.

Re: Possibility to disable `ALTER SYSTEM`

ator. An operator, at that point, will have the possibility to configure this knob in conjunction with others. A possibility that Postgres is not currently giving. Postgres itself should be able to give this possibility, as these environments demand Postgres to address their emerging needs. Thank you, Gabriele -- Gabriele Bartolini Vice President, Cloud Native at EDB enterprisedb.com

Re: Possibility to disable `ALTER SYSTEM`

ilability we are forced to go beyond the single instance and think in terms of primary with one or more standbys or at least continuous backup in place). Thanks, Gabriele -- Gabriele Bartolini Vice President, Cloud Native at EDB enterprisedb.com

Re: Possibility to disable `ALTER SYSTEM`

t; The setting can be verified with: psql -c 'SHOW enable_alter_system' enable_alter_system - off (1 row) And then: psql -c 'ALTER SYSTEM SET max_connections TO 10' ERROR: permission denied to run ALTER SYSTEM Thanks for your attention and looking forward to getting feedback a

Re: Possibility to disable `ALTER SYSTEM`

d not open file "postgresql.auto.conf": Permission denied ``` IMO we should clearly state that `ALTER SYSTEM` is deliberately disabled in a system, rather than indirectly hinting it through an inaccessible file. Not sure if I am clearly highlighting the fine difference here. Thanks, Gabriele --

Re: Possibility to disable `ALTER SYSTEM`

Hi Tom, On Thu, 7 Sept 2023 at 22:27, Tom Lane wrote: > Gabriele Bartolini writes: > > I would like to propose a patch that allows administrators to disable > > `ALTER SYSTEM` via either a runt-time option to pass to the Postgres > server > > process at startup (e.g.

Re: Possibility to disable `ALTER SYSTEM`

dly features! :) That sounds like a good idea to me. Thanks, Gabriele -- Gabriele Bartolini Vice President, Cloud Native at EDB enterprisedb.com

Possibility to disable `ALTER SYSTEM`

if there’s room for it. Thanks for your attention and … looking forward to your feedback! Ciao, Gabriele -- Gabriele Bartolini Vice President, Cloud Native at EDB enterprisedb.com