Why cannot I create another user manually when connected through pgbouncer?

[Ivan Kurnosov]

Hi,

I connect with a role that has `CREATEROLE` grant, yet when I connect through crunchhydata operator pgbouncer and run `CREATE ROLE ...` to create another user - it returns `ERROR:  permission denied to create role`. I can create one when am connected to postgresql primary pod directly.

What part of pgbouncer configuration forbids it?

Thank you!

[Ivan Kurnosov]

Okay, it looks like permissions are not immediately reflected: and if you connect through pgbouncer with account credentials that don't have permissions, then grant them - you need to kill the connection on pgbouncer before the permissions applied. Thank you! :-)

To unsubscribe from this topic, visit https://groups.google.com/a/crunchydata.com/d/topic/postgres-operator/4idX3ZFjYBk/unsubscribe.
To unsubscribe from this group and all its topics, send an email to postgres-opera...@crunchydata.com.

--

With best regards, Ivan Kurnosov

[Joseph Mckulka]

Hi Ivan,

I'm glad you were able to get this sorted out. In the future, I do recommend posting your questions in the the Crunchy Discord server.  This specific community has migrated to Discord, so this should get your question additional visibility among the community.

Thanks!

- Joseph