build(deps): bump github.com/aiven/go-api-schemas from 1.64.0 to 1.65…

….0 (#667)
aiven · Mar 12, 2024 · b8af70d · b8af70d
1 parent 560366a
commit b8af70d
Show file tree

Hide file tree

Showing 8 changed files with 367 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -45,6 +45,7 @@
   Enable or disable filtering of alerting by backend roles. Requires Security plugin
 - Change `Redis` field `userConfig.redis_notify_keyspace_events`: pattern ~~`^[KEg\$lshzxeA]*$`~~ →
   `^[KEg\$lshzxentdmA]*$`
+- Add `PostgreSQL` field `userConfig.pgaudit`, type `object`: System-wide settings for the pgaudit extension
 
 ## v0.17.0 - 2024-02-01
 

diff --git a/api/v1alpha1/userconfig/service/pg/pg.go b/api/v1alpha1/userconfig/service/pg/pg.go
diff --git a/api/v1alpha1/userconfig/service/pg/zz_generated.deepcopy.go b/api/v1alpha1/userconfig/service/pg/zz_generated.deepcopy.go
diff --git a/charts/aiven-operator-crds/templates/aiven.io_postgresqls.yaml b/charts/aiven-operator-crds/templates/aiven.io_postgresqls.yaml
@@ -774,6 +774,104 @@ spec:
                         - "15"
                         - "16"
                       type: string
+                    pgaudit:
+                      description: System-wide settings for the pgaudit extension
+                      properties:
+                        feature_enabled:
+                          description:
+                            Enable pgaudit extension. When enabled, pgaudit
+                            extension will be automatically installed.Otherwise, extension
+                            will be uninstalled but auditing configurations will be
+                            preserved.
+                          type: boolean
+                        log:
+                          description:
+                            Specifies which classes of statements will be
+                            logged by session audit logging.
+                          items:
+                            type: string
+                          type: array
+                        log_catalog:
+                          description:
+                            Specifies that session logging should be enabled
+                            in the casewhere all relations in a statement are in pg_catalog.
+                          type: boolean
+                        log_client:
+                          description:
+                            Specifies whether log messages will be visible
+                            to a client process such as psql.
+                          type: boolean
+                        log_level:
+                          description:
+                            Specifies the log level that will be used for
+                            log entries.
+                          enum:
+                            - debug1
+                            - debug2
+                            - debug3
+                            - debug4
+                            - debug5
+                            - info
+                            - notice
+                            - warning
+                            - log
+                          type: string
+                        log_max_string_length:
+                          description:
+                            Crop parameters representation and whole statements
+                            if they exceed this threshold. A (default) value of -1 disable
+                            the truncation.
+                          maximum: 102400
+                          minimum: -1
+                          type: integer
+                        log_nested_statements:
+                          description:
+                            This GUC allows to turn off logging nested statements,
+                            that is, statements that are executed as part of another
+                            ExecutorRun.
+                          type: boolean
+                        log_parameter:
+                          description:
+                            Specifies that audit logging should include the
+                            parameters that were passed with the statement.
+                          type: boolean
+                        log_parameter_max_size:
+                          description:
+                            Specifies that parameter values longer than this
+                            setting (in bytes) should not be logged, but replaced with
+                            <long param suppressed>.
+                          type: integer
+                        log_relation:
+                          description:
+                            Specifies whether session audit logging should
+                            create a separate log entry for each relation (TABLE, VIEW,
+                            etc.) referenced in a SELECT or DML statement.
+                          type: boolean
+                        log_rows:
+                          description:
+                            Specifies that audit logging should include the
+                            rows retrieved or affected by a statement. When enabled
+                            the rows field will be included after the parameter field.
+                          type: boolean
+                        log_statement:
+                          description:
+                            Specifies whether logging will include the statement
+                            text and parameters (if enabled).
+                          type: boolean
+                        log_statement_once:
+                          description:
+                            Specifies whether logging will include the statement
+                            text and parameters with the first log entry for a statement/substatement
+                            combination or with every entry.
+                          type: boolean
+                        role:
+                          description:
+                            Specifies the master role to use for object audit
+                            logging.
+                          maxLength: 64
+                          pattern: ^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$
+                          type: string
+                      type: object
                     pgbouncer:
                       description: PGBouncer connection pooling settings
                       properties:

diff --git a/config/crd/bases/aiven.io_postgresqls.yaml b/config/crd/bases/aiven.io_postgresqls.yaml
@@ -774,6 +774,104 @@ spec:
                         - "15"
                         - "16"
                       type: string
+                    pgaudit:
+                      description: System-wide settings for the pgaudit extension
+                      properties:
+                        feature_enabled:
+                          description:
+                            Enable pgaudit extension. When enabled, pgaudit
+                            extension will be automatically installed.Otherwise, extension
+                            will be uninstalled but auditing configurations will be
+                            preserved.
+                          type: boolean
+                        log:
+                          description:
+                            Specifies which classes of statements will be
+                            logged by session audit logging.
+                          items:
+                            type: string
+                          type: array
+                        log_catalog:
+                          description:
+                            Specifies that session logging should be enabled
+                            in the casewhere all relations in a statement are in pg_catalog.
+                          type: boolean
+                        log_client:
+                          description:
+                            Specifies whether log messages will be visible
+                            to a client process such as psql.
+                          type: boolean
+                        log_level:
+                          description:
+                            Specifies the log level that will be used for
+                            log entries.
+                          enum:
+                            - debug1
+                            - debug2
+                            - debug3
+                            - debug4
+                            - debug5
+                            - info
+                            - notice
+                            - warning
+                            - log
+                          type: string
+                        log_max_string_length:
+                          description:
+                            Crop parameters representation and whole statements
+                            if they exceed this threshold. A (default) value of -1 disable
+                            the truncation.
+                          maximum: 102400
+                          minimum: -1
+                          type: integer
+                        log_nested_statements:
+                          description:
+                            This GUC allows to turn off logging nested statements,
+                            that is, statements that are executed as part of another
+                            ExecutorRun.
+                          type: boolean
+                        log_parameter:
+                          description:
+                            Specifies that audit logging should include the
+                            parameters that were passed with the statement.
+                          type: boolean
+                        log_parameter_max_size:
+                          description:
+                            Specifies that parameter values longer than this
+                            setting (in bytes) should not be logged, but replaced with
+                            <long param suppressed>.
+                          type: integer
+                        log_relation:
+                          description:
+                            Specifies whether session audit logging should
+                            create a separate log entry for each relation (TABLE, VIEW,
+                            etc.) referenced in a SELECT or DML statement.
+                          type: boolean
+                        log_rows:
+                          description:
+                            Specifies that audit logging should include the
+                            rows retrieved or affected by a statement. When enabled
+                            the rows field will be included after the parameter field.
+                          type: boolean
+                        log_statement:
+                          description:
+                            Specifies whether logging will include the statement
+                            text and parameters (if enabled).
+                          type: boolean
+                        log_statement_once:
+                          description:
+                            Specifies whether logging will include the statement
+                            text and parameters with the first log entry for a statement/substatement
+                            combination or with every entry.
+                          type: boolean
+                        role:
+                          description:
+                            Specifies the master role to use for object audit
+                            logging.
+                          maxLength: 64
+                          pattern: ^[_A-Za-z0-9][-._A-Za-z0-9]{0,63}$
+                          type: string
+                      type: object
                     pgbouncer:
                       description: PGBouncer connection pooling settings
                       properties: