mattrobinsonsre/terrapod v0.46.1

on GitHub

Patch release: cloud-IAM database auth for the bootstrap Job.

Bug Fixes

• Bootstrap Job now supports cloud-IAM DB auth — like the migrations Job before it (v0.45.1), the bootstrap Job (admin/pool seeding) built its own engine and still used static-password auth. On an IAM-only / password-less database — and because ArgoCD re-runs post-install hooks on every Sync — it CrashLooped every sync. It now mints a per-connection IAM token and connects with TLS when database.auth_mode is an IAM mode (runs under the API's workload-identity service account, mounts the DB CA bundle). The migrations and bootstrap Jobs now share one tested register_engine_iam_auth path.
• New bootstrap.enabled Helm toggle (default true) — set false to skip the bootstrap Job once the admin user is seeded, since ArgoCD re-runs it on every sync.

Status

Beta. Static-password DB auth (the default) is unchanged.

Full Changelog: v0.46.0...v0.46.1