d1b4a880e2
Fresh-DB bootstrap fixes enabling 25/25 pages zero HTTP errors: - Fix shared.tenants schema mismatch (missing is_default column in init script 16) - Align migration 000 column set with init script (superset for all modules) - Seed Authority tenant + stella-ops-ui OAuth client in init script 04 - Widen Platform auth bypass to cover Docker (172.0.0.0/8) and localhost (127.0.0.0/8) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
61 lines
1.9 KiB
PL/PgSQL
61 lines
1.9 KiB
PL/PgSQL
-- Release module full schema bootstrap for local dev compose.
|
|
-- Includes schemas, tenants, integration hub, environments, release management,
|
|
-- workflow, promotion, deployment, agents, trust/signing, and read models.
|
|
-- All statements are idempotent (IF NOT EXISTS / ON CONFLICT).
|
|
|
|
-- Shared tenants (required by release.integrations FK)
|
|
CREATE SCHEMA IF NOT EXISTS shared;
|
|
CREATE TABLE IF NOT EXISTS shared.tenants (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
tenant_id TEXT NOT NULL UNIQUE,
|
|
name TEXT NOT NULL,
|
|
display_name TEXT,
|
|
is_default BOOLEAN NOT NULL DEFAULT false,
|
|
status TEXT NOT NULL DEFAULT 'active',
|
|
settings JSONB NOT NULL DEFAULT '{}',
|
|
metadata JSONB NOT NULL DEFAULT '{}',
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE UNIQUE INDEX IF NOT EXISTS uq_shared_tenants_single_default
|
|
ON shared.tenants (is_default)
|
|
WHERE is_default;
|
|
|
|
-- Seed shared tenant for local dev
|
|
INSERT INTO shared.tenants (tenant_id, name, display_name, status)
|
|
VALUES ('demo-prod', 'Production', 'Demo Production', 'active')
|
|
ON CONFLICT (tenant_id) DO NOTHING;
|
|
|
|
-- Release schemas
|
|
CREATE SCHEMA IF NOT EXISTS release;
|
|
CREATE SCHEMA IF NOT EXISTS release_app;
|
|
|
|
-- Helper function for updated_at triggers
|
|
CREATE OR REPLACE FUNCTION release.update_updated_at_column()
|
|
RETURNS TRIGGER AS $$
|
|
BEGIN
|
|
NEW.updated_at = now();
|
|
RETURN NEW;
|
|
END;
|
|
$$ LANGUAGE plpgsql;
|
|
|
|
-- Tenant isolation function
|
|
CREATE OR REPLACE FUNCTION release_app.require_current_tenant()
|
|
RETURNS UUID
|
|
LANGUAGE plpgsql STABLE SECURITY DEFINER
|
|
AS $$
|
|
DECLARE
|
|
v_tenant TEXT;
|
|
BEGIN
|
|
v_tenant := current_setting('app.tenant_id', true);
|
|
IF v_tenant IS NULL OR v_tenant = '' THEN
|
|
RAISE EXCEPTION 'app.tenant_id session variable not set';
|
|
END IF;
|
|
RETURN v_tenant::UUID;
|
|
END;
|
|
$$;
|
|
|
|
-- Analytics schema
|
|
CREATE SCHEMA IF NOT EXISTS analytics;
|