Closed djjudas21 closed 8 months ago
I know this is to fix the CREATE EXTENSION permissions, but besides that, is it desirable to run with a superuser by default?
No, it isn't ideal to run with a superuser by default, but in my opinion it's better to accept this risk than to ship a broken chart that doesn't deploy a working Immich instance.
With a bit of extra work it would be possible to run a one-shot Kubernetes job that executes the CREATE EXTENSION
commands with superuser privilege, and then starts up Immich with the limited user
From the next release, Immich will rely on the pgvecto.rs extension so the chart will have to ship a different image anyways. Maybe that can provide a resolution?
Hey, can this be merged now? Thanks
Superseded by #53, which creates the extensions through an initdb script instead.
postgres
userpostgres
user instead of the limitedimmich
userWorkaround for https://github.com/immich-app/immich/issues/5399