citus/src
Naisila Puka a664e849bc Propagates SECURITY LABEL ON ROLE stmt (#7304)
We propagate `SECURITY LABEL [for provider] ON ROLE rolename IS
labelname` to the worker nodes.
We also make sure to run the relevant `SecLabelStmt` commands on a
newly added node by looking at roles found in `pg_shseclabel`.

See official docs for explanation on how this command works:
https://www.postgresql.org/docs/current/sql-security-label.html
This command stores the role label in the `pg_shseclabel` catalog table.

This commit also fixes the regex string in
`check_gucs_are_alphabetically_sorted.sh` script such that it escapes
the dot. Previously it was looking for all strings starting with "citus"
instead of "citus." as it should.

To test this feature, I currently make use of a special GUC to control
label provider registration in PG_init when creating the Citus extension.

(cherry picked from commit 0d1f18862b)
2024-11-13 14:08:08 +03:00
..
backend Propagates SECURITY LABEL ON ROLE stmt (#7304) 2024-11-13 14:08:08 +03:00
include Propagates SECURITY LABEL ON ROLE stmt (#7304) 2024-11-13 14:08:08 +03:00
test Propagates SECURITY LABEL ON ROLE stmt (#7304) 2024-11-13 14:08:08 +03:00