Skip to content

Dr.Egeria Postgres element commands take a secrets store (ISSUE-160 follow-up) - #478

Merged
dwolfson merged 2 commits into
odpi:mainfrom
dwolfson:claude/elegant-chatterjee-d280de
Oct 22, 2026
Merged

dwolfson merged 2 commits into
odpi:mainfrom
dwolfson:claude/elegant-chatterjee-d280de

Conversation

@dwolfson

Copy link
Copy Markdown
Member

Summary

ISSUE-160 follow-up: pyegeria 6.2.8's Postgres template builders ignore db_user/db_pwd (Egeria's Postgres templates take credentials from a secrets store), but Dr.Egeria's Create Postgres Server Element / Create Postgres Database Element still asked for Database User Id / Database Password.

  • Asset Maker compact spec (via the Spec Editor API): removed Database User Id / Database Password (no other command used them); added Secrets Store Path Name, Secrets Collection Name and Version Identifier to both, and Resource Name (canonical definition) to the server.
  • AssetMakerProcessor passes secrets_store_path_name, secrets_collection_name, version (and resource_name for the server); no longer passes db_user/db_pwd.
  • Regenerated templates and report specs (refresh_specs --merge-reports). generated_format_sets.json also picks up the analytic_binders field added to ActionParameter since its last regeneration.
  • New test tests/micro-tests/test_postgres_element_secrets.py; ISSUE-160 entry in PYEGERIA_ISSUES.md updated.

Pairs with #477 for the next release (6.2.9).

Companion template PRs: egeria-workspaces and egeria-trellis feat/postgres-secrets-templates.

Test plan

  • Micro-tests in a clean python:3.13-slim container: 1,424 collected, 0 failed
  • Not exercised against a live Egeria server

🤖 Generated with Claude Code

dwolfson and others added 2 commits October 21, 2026 20:11
…ollow-up)

pyegeria 6.2.8's Postgres template builders ignore db_user/db_pwd (Egeria's
Postgres templates read credentials from a secrets store), but Dr.Egeria's
Create Postgres Server Element / Create Postgres Database Element still
asked for Database User Id / Database Password and passed them through.

- Asset Maker compact spec (edited through the Spec Editor API): delete
  Database User Id / Database Password (used by no other command); add
  Secrets Store Path Name and Secrets Collection Name; add Version
  Identifier to both commands and Resource Name (canonical Governance
  Officer definition) to the server.
- AssetMakerProcessor passes secrets_store_path_name,
  secrets_collection_name, version (and resource_name for the server), and
  no longer passes db_user/db_pwd.
- Regenerated templates and report specs (refresh_specs --merge-reports).
  generated_format_sets.json also picks up the analytic_binders field
  added to ActionParameter since it was last regenerated.
- tests/micro-tests/test_postgres_element_secrets.py.
- PYEGERIA_ISSUES.md: ISSUE-160's Dr.Egeria follow-up is done.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Dan Wolfson <dan.wolfson@pdr-associates.com>
@dwolfson
dwolfson merged commit 817e7ef into odpi:main Oct 22, 2026
5 checks passed
dwolfson added a commit that referenced this pull request Oct 22, 2026
Ships #477 (ISSUE-161: Dr.Egeria entry points resolve the Egeria user
at run time with one precedence chain, via resolve_egeria_credentials)
and #478 (Dr.Egeria Postgres Server/Database Element commands take
secrets-store attributes; Database User Id / Database Password removed).

Signed-off-by: Dan Wolfson <dan.wolfson@pdr-associates.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant