PostgreSQL

Existing governed PostgreSQL proxy and discovery connector.

Property	Value
Key	postgresql
Source type	postgresql
Status	production
Active by default	yes
Default cache strategy	deterministic_first
Capabilities	supports_discovery, supports_field_permissions, supports_ingestion, supports_proxy, supports_query, supports_write

Connection configuration

Secret fields should be given as a reference, <field>_ref, such as env://NAME, rather than a literal.

Key	Secret
host	no
port	no
database	no
database_ref	no
user	no
password_ref	no
sslmode	no
verify_ssl	no
password	yes; prefer password_ref

Default role templates

Offered when a source is created with default roles. Edit them to fit.

analyst

Effect	Action	Resource type	Pattern
allow	db.schema.list	db.schema	*
allow	db.table.describe	db.table	*.*
allow	db.table.select	db.table	*.*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*

blocked

Effect	Action	Resource type	Pattern
deny	*	*	*

owner

Effect	Action	Resource type	Pattern
allow	*	*	*

read

Effect	Action	Resource type	Pattern
allow	db.schema.list	db.schema	*
allow	db.table.describe	db.table	*.*
allow	db.table.select	db.table	*.*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*

write

Effect	Action	Resource type	Pattern
allow	db.schema.list	db.schema	*
allow	db.table.describe	db.table	*.*
allow	db.table.select	db.table	*.*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*
allow	db.table.insert	db.table	*.*
allow	db.table.update	db.table	*.*