Update default password hashing algorithm (#578)

eberlep · web-flow · commit ce6dcbd29647 · 2024-11-05T11:14:20.000+01:00
* Update default password hashing algorithm

* Tell the linter that this is not a password
diff --git a/api/v1/postgres_types.go b/api/v1/postgres_types.go
@@ -84,6 +84,7 @@ const (
 	defaultPostgresParamValueWalKeepSegments        = "64"
 	defaultPostgresParamValueWalKeepSize            = "1GB"
 	defaultPostgresParamValuePGStatStatementsMax    = "500"
+	defaultPostgresParamValuePasswordEncryption     = "scram-sha-256" // nolint
 
 	// PostgresAutoAssignedIPNamePrefix a prefix to add to the generated random name
 	PostgresAutoAssignedIPNamePrefix = "pgaas-autoassign-"
@@ -982,6 +983,8 @@ func setDefaultPostgresParams(parameters map[string]string, version string) {
 	}
 
 	parameters["pg_stat_statements.max"] = defaultPostgresParamValuePGStatStatementsMax
+
+	parameters["password_encryption"] = defaultPostgresParamValuePasswordEncryption
 }
 
 // setPostgresParams add the provided params to the parameter map (but ignore params that are blocked)

Original file line number	Diff line number	Diff line change
`@@ -84,6 +84,7 @@ const (`
`84`	`84`	`defaultPostgresParamValueWalKeepSegments = "64"`
`85`	`85`	`defaultPostgresParamValueWalKeepSize = "1GB"`
`86`	`86`	`defaultPostgresParamValuePGStatStatementsMax = "500"`
	`87`	`+ defaultPostgresParamValuePasswordEncryption = "scram-sha-256" // nolint`
`87`	`88`
`88`	`89`	`// PostgresAutoAssignedIPNamePrefix a prefix to add to the generated random name`
`89`	`90`	`PostgresAutoAssignedIPNamePrefix = "pgaas-autoassign-"`
`@@ -982,6 +983,8 @@ func setDefaultPostgresParams(parameters map[string]string, version string) {`
`982`	`983`	`}`
`983`	`984`
`984`	`985`	`parameters["pg_stat_statements.max"] = defaultPostgresParamValuePGStatStatementsMax`
	`986`	`+`
	`987`	`+ parameters["password_encryption"] = defaultPostgresParamValuePasswordEncryption`
`985`	`988`	`}`
`986`	`989`
`987`	`990`	`// setPostgresParams add the provided params to the parameter map (but ignore params that are blocked)`