Misc fixes (RedHatProductSecurity#111)

This PR introduces the following changes: * A fixup to the `osidb.acl` custom parameter being set on connection start * Bump of the `Dockerfile`'s ubi8 version to 8.7 (latest)
jobselko · Dec 22, 2022 · 2f548ce · 2f548ce
2 parents a3c4a40 + c74ed31
commit 2f548ce
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 6 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.redhat.io/ubi8/ubi:8.6
+FROM registry.redhat.io/ubi8/ubi:8.7
 
 LABEL summary="OSIDB" \
       maintainer="Product Security DevOps <[email protected]>"

diff --git a/config/settings_ci.py b/config/settings_ci.py
@@ -69,7 +69,7 @@
             "gssencmode": "disable",
             # this is a hack due to our inability to set a custom parameter either at
             # the database or role level in managed databases such as AWS RDS
-            "options": "-c osidb.acl=''",
+            "options": "-c osidb.acl=00000000-0000-0000-0000-000000000000",
         },
     }
 }

diff --git a/config/settings_local.py b/config/settings_local.py
@@ -70,7 +70,7 @@
             "gssencmode": "disable",
             # this is a hack due to our inability to set a custom parameter either at
             # the database or role level in managed databases such as AWS RDS
-            "options": "-c osidb.acl=''",
+            "options": "-c osidb.acl=00000000-0000-0000-0000-000000000000",
         },
     }
 }

diff --git a/config/settings_prod.py b/config/settings_prod.py
@@ -77,7 +77,7 @@
             "gssencmode": "disable",
             # this is a hack due to our inability to set a custom parameter either at
             # the database or role level in managed databases such as AWS RDS
-            "options": "-c osidb.acl=''",
+            "options": "-c osidb.acl=00000000-0000-0000-0000-000000000000",
         },
     }
 }

diff --git a/config/settings_shell.py b/config/settings_shell.py
@@ -25,7 +25,7 @@
             "gssencmode": "disable",
             # this is a hack due to our inability to set a custom parameter either at
             # the database or role level in managed databases such as AWS RDS
-            "options": "-c osidb.acl=''",
+            "options": "-c osidb.acl=00000000-0000-0000-0000-000000000000",
         },
     }
 }
diff --git a/config/settings_stage.py b/config/settings_stage.py
@@ -77,7 +77,7 @@
             "gssencmode": "disable",
             # this is a hack due to our inability to set a custom parameter either at
             # the database or role level in managed databases such as AWS RDS
-            "options": "-c osidb.acl=''",
+            "options": "-c osidb.acl=00000000-0000-0000-0000-000000000000",
         },
     }
 }