supabase-postgres.git / summary / log / commit / refs

commit    82b96e09fc0ede2b330e613b67aaf48a6edb03f6
Author:   Stojan Dimitrovski <sdimitrovski@gmail.com>
Commit:   GitHub <noreply@github.com>
Date:     Mon Jan 13 11:31:46 2025 +0000

    feat: update envoy lds with origin protection keys (#1403)


 ansible/files/envoy_config/lds.supabase.yaml | 19 +++++++++++++++++++
 ansible/vars.yml                             |  6 +++---
 2 files changed, 22 insertions(+), 3 deletions(-)

diff --git a/ansible/files/envoy_config/lds.supabase.yaml b/ansible/files/envoy_config/lds.supabase.yaml
index 2fc7cae1..40d3d46f 100644
--- a/ansible/files/envoy_config/lds.supabase.yaml
+++ b/ansible/files/envoy_config/lds.supabase.yaml
@@ -82,6 +82,25 @@ resources:
                                         name: ':path'
                                         string_match:
                                           contains: apikey=supabase_admin_key
+                        origin_protection_key_missing:
+                          permissions:
+                            - any: true
+                          principals:
+                            - not_id:
+                                header:
+                                  name: sb-opk
+                                  present_match: true
+                        origin_protection_key_not_valid:
+                          permissions:
+                            - any: true
+                          principals:
+                            - not_id:
+                                or_ids:
+                                  ids:
+                                    - header:
+                                        name: sb-opk
+                                        string_match:
+                                          exact: supabase_origin_protection_key
                 - name: envoy.filters.http.lua
                   typed_config:
                     '@type': >-
diff --git a/ansible/vars.yml b/ansible/vars.yml
index c891ede2..ae48764c 100644
--- a/ansible/vars.yml
+++ b/ansible/vars.yml
@@ -9,9 +9,9 @@ postgres_major:
 
 # Full version strings for each major version
 postgres_release:
-  postgresorioledb-17: "17.0.1.016-orioledb"
-  postgres15: "15.8.1.026"
-  postgres16: "16.3.1.032"
+  postgresorioledb-17: "17.0.1.017-orioledb"
+  postgres15: "15.8.1.027"
+  postgres16: "16.3.1.033"
 
 # Non Postgres Extensions
 pgbouncer_release: "1.19.0"


[parent: e60f71e012f9]