# Reference ## Table of Contents ### Classes #### Public Classes * [`postgresql::client`](#postgresql--client): Installs PostgreSQL client software. Set the following parameters if you have a custom version you would like to install. * [`postgresql::globals`](#postgresql--globals): Class for setting cross-class global overrides. * [`postgresql::lib::devel`](#postgresql--lib--devel): This class installs postgresql development libraries. * [`postgresql::lib::docs`](#postgresql--lib--docs): Installs PostgreSQL bindings for Postgres-Docs. Set the following parameters if you have a custom version you would like to install. * [`postgresql::lib::java`](#postgresql--lib--java): This class installs the postgresql jdbc connector. * [`postgresql::lib::perl`](#postgresql--lib--perl): This class installs the perl libs for postgresql. * [`postgresql::lib::python`](#postgresql--lib--python): This class installs the python libs for postgresql. * [`postgresql::server`](#postgresql--server): This installs a PostgreSQL server * [`postgresql::server::contrib`](#postgresql--server--contrib): Install the contrib postgresql packaging. * [`postgresql::server::plperl`](#postgresql--server--plperl): This class installs the PL/Perl procedural language for postgresql. * [`postgresql::server::plpython`](#postgresql--server--plpython): This class installs the PL/Python procedural language for postgresql. * [`postgresql::server::postgis`](#postgresql--server--postgis): Install the postgis postgresql packaging. #### Private Classes * `postgresql::backup::pg_dump`: "Provider" for pg_dump backup * `postgresql::dnfmodule`: Manage the DNF module * `postgresql::params` * `postgresql::repo` * `postgresql::repo::apt_postgresql_org` * `postgresql::repo::yum_postgresql_org` * `postgresql::server::config` * `postgresql::server::initdb` * `postgresql::server::install` * `postgresql::server::late_initdb`: Manage the default encoding when database initialization is managed by the package * `postgresql::server::passwd` * `postgresql::server::reload` * `postgresql::server::service` ### Defined types #### Public Defined types * [`postgresql::server::config_entry`](#postgresql--server--config_entry): Manage a postgresql.conf entry. * [`postgresql::server::database`](#postgresql--server--database): Define for creating a database. * [`postgresql::server::database_grant`](#postgresql--server--database_grant): Manage a database grant. * [`postgresql::server::db`](#postgresql--server--db): Define for conveniently creating a role, database and assigning the correct permissions. * [`postgresql::server::default_privileges`](#postgresql--server--default_privileges): Manage a database defaults privileges. Only works with PostgreSQL version 9.6 and above. * [`postgresql::server::extension`](#postgresql--server--extension): Activate an extension on a postgresql database. * [`postgresql::server::grant`](#postgresql--server--grant): Define for granting permissions to roles. * [`postgresql::server::grant_role`](#postgresql--server--grant_role): Define for granting membership to a role. * [`postgresql::server::instance::config`](#postgresql--server--instance--config): Manages the config for a postgresql::server instance * [`postgresql::server::instance::initdb`](#postgresql--server--instance--initdb): Manages initdb feature for a postgresql::server instance * [`postgresql::server::instance::late_initdb`](#postgresql--server--instance--late_initdb): Manage the default encoding when database initialization is managed by the package * [`postgresql::server::instance::passwd`](#postgresql--server--instance--passwd): Overrides the default PostgreSQL superuser * [`postgresql::server::instance::reload`](#postgresql--server--instance--reload): Overrides the default reload or status command for your PostgreSQL service * [`postgresql::server::instance::service`](#postgresql--server--instance--service): Manages the service for the postgres main instance (default) or additional instances * [`postgresql::server::pg_hba_rule`](#postgresql--server--pg_hba_rule): This resource manages an individual rule that applies to the file defined in target. * [`postgresql::server::pg_ident_rule`](#postgresql--server--pg_ident_rule): This resource manages an individual rule that applies to the file defined in target. * [`postgresql::server::reassign_owned_by`](#postgresql--server--reassign_owned_by): Define for reassigning the ownership of objects within a database. * [`postgresql::server::recovery`](#postgresql--server--recovery): This resource manages the parameters that applies to the recovery.conf template. * [`postgresql::server::role`](#postgresql--server--role): Define for creating a database role. * [`postgresql::server::schema`](#postgresql--server--schema): Create a new schema. * [`postgresql::server::table_grant`](#postgresql--server--table_grant): This resource wraps the grant resource to manage table grants specifically. * [`postgresql::server::tablespace`](#postgresql--server--tablespace): This module creates tablespace. * [`postgresql::server_instance`](#postgresql--server_instance): define to install and manage additional postgresql instances #### Private Defined types * `postgresql::server::instance::systemd`: This define handles systemd drop-in files for the postgres main instance (default) or additional instances ### Resource types * [`postgresql_conf`](#postgresql_conf): This type allows puppet to manage postgresql.conf parameters. * [`postgresql_conn_validator`](#postgresql_conn_validator): Verify if a connection can be successfully established * [`postgresql_psql`](#postgresql_psql): An arbitrary tag for your own reference; the name of the message. * [`postgresql_replication_slot`](#postgresql_replication_slot): Manages Postgresql replication slots. ### Functions #### Public Functions * [`postgresql::default`](#postgresql--default): This function pull default values from the `params` class or `globals` class if the value is not present in `params`. * [`postgresql::postgresql_escape`](#postgresql--postgresql_escape): This function escapes a string using [Dollar Quoting](https://www.postgresql.org/docs/12/sql-syntax-lexical.html#SQL-SYNTAX-DOLLAR-QUOTING) using a randomly generated tag if required. * [`postgresql::postgresql_password`](#postgresql--postgresql_password): This function returns the postgresql password hash from the clear text username / password * [`postgresql::prepend_sql_password`](#postgresql--prepend_sql_password): This function exists for usage of a role password that is a deferred function * [`postgresql_escape`](#postgresql_escape): DEPRECATED. Use the namespaced function [`postgresql::postgresql_escape`](#postgresqlpostgresql_escape) instead. * [`postgresql_password`](#postgresql_password): DEPRECATED. Use the namespaced function [`postgresql::postgresql_password`](#postgresqlpostgresql_password) instead. #### Private Functions * `postgresql::postgresql_acls_to_resources_hash`: This internal function translates the ipv(4|6)acls format into a resource suitable for create_resources. ### Data types * [`Postgresql::Pg_hba_rule`](#Postgresql--Pg_hba_rule): type for all parameters in the postgresql::server::hba_rule defined resource * [`Postgresql::Pg_hba_rule_address`](#Postgresql--Pg_hba_rule_address): Supported address types * [`Postgresql::Pg_hba_rule_type`](#Postgresql--Pg_hba_rule_type): enum for all different types for the pg_hba_conf * [`Postgresql::Pg_hba_rules`](#Postgresql--Pg_hba_rules): validates a hash of entries for postgresql::server::pg_hab_conf * [`Postgresql::Pg_password_encryption`](#Postgresql--Pg_password_encryption): the supported password_encryption ### Tasks * [`sql`](#sql): Allows you to execute arbitary SQL ## Classes ### `postgresql::client` Installs PostgreSQL client software. Set the following parameters if you have a custom version you would like to install. * **Note** Make sure to add any necessary yum or apt repositories if specifying a custom version. #### Parameters The following parameters are available in the `postgresql::client` class: * [`file_ensure`](#-postgresql--client--file_ensure) * [`validcon_script_path`](#-postgresql--client--validcon_script_path) * [`package_name`](#-postgresql--client--package_name) * [`package_ensure`](#-postgresql--client--package_ensure) ##### `file_ensure` Data type: `Enum['file', 'absent']` Ensure the connection validation script is present Default value: `'file'` ##### `validcon_script_path` Data type: `Stdlib::Absolutepath` Optional. Absolute path for the postgresql connection validation script. Default value: `$postgresql::params::validcon_script_path` ##### `package_name` Data type: `String[1]` Sets the name of the PostgreSQL client package. Default value: `$postgresql::params::client_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Ensure the client package is installed Default value: `'present'` ### `postgresql::globals` Class for setting cross-class global overrides. * **Note** Most server-specific defaults should be overridden in the postgresql::server class. This class should be used only if you are using a non-standard OS, or if you are changing elements that can only be changed here, such as version or manage_package_repo. #### Parameters The following parameters are available in the `postgresql::globals` class: * [`client_package_name`](#-postgresql--globals--client_package_name) * [`server_package_name`](#-postgresql--globals--server_package_name) * [`contrib_package_name`](#-postgresql--globals--contrib_package_name) * [`devel_package_name`](#-postgresql--globals--devel_package_name) * [`java_package_name`](#-postgresql--globals--java_package_name) * [`docs_package_name`](#-postgresql--globals--docs_package_name) * [`perl_package_name`](#-postgresql--globals--perl_package_name) * [`plperl_package_name`](#-postgresql--globals--plperl_package_name) * [`plpython_package_name`](#-postgresql--globals--plpython_package_name) * [`python_package_name`](#-postgresql--globals--python_package_name) * [`postgis_package_name`](#-postgresql--globals--postgis_package_name) * [`service_name`](#-postgresql--globals--service_name) * [`service_provider`](#-postgresql--globals--service_provider) * [`service_status`](#-postgresql--globals--service_status) * [`default_database`](#-postgresql--globals--default_database) * [`validcon_script_path`](#-postgresql--globals--validcon_script_path) * [`initdb_path`](#-postgresql--globals--initdb_path) * [`psql_path`](#-postgresql--globals--psql_path) * [`pg_hba_conf_path`](#-postgresql--globals--pg_hba_conf_path) * [`pg_ident_conf_path`](#-postgresql--globals--pg_ident_conf_path) * [`postgresql_conf_path`](#-postgresql--globals--postgresql_conf_path) * [`postgresql_conf_mode`](#-postgresql--globals--postgresql_conf_mode) * [`recovery_conf_path`](#-postgresql--globals--recovery_conf_path) * [`default_connect_settings`](#-postgresql--globals--default_connect_settings) * [`pg_hba_conf_defaults`](#-postgresql--globals--pg_hba_conf_defaults) * [`datadir`](#-postgresql--globals--datadir) * [`confdir`](#-postgresql--globals--confdir) * [`bindir`](#-postgresql--globals--bindir) * [`xlogdir`](#-postgresql--globals--xlogdir) * [`logdir`](#-postgresql--globals--logdir) * [`log_line_prefix`](#-postgresql--globals--log_line_prefix) * [`user`](#-postgresql--globals--user) * [`group`](#-postgresql--globals--group) * [`version`](#-postgresql--globals--version) * [`postgis_version`](#-postgresql--globals--postgis_version) * [`repo_proxy`](#-postgresql--globals--repo_proxy) * [`repo_baseurl`](#-postgresql--globals--repo_baseurl) * [`yum_repo_commonurl`](#-postgresql--globals--yum_repo_commonurl) * [`apt_source_release`](#-postgresql--globals--apt_source_release) * [`needs_initdb`](#-postgresql--globals--needs_initdb) * [`encoding`](#-postgresql--globals--encoding) * [`locale`](#-postgresql--globals--locale) * [`data_checksums`](#-postgresql--globals--data_checksums) * [`timezone`](#-postgresql--globals--timezone) * [`password_encryption`](#-postgresql--globals--password_encryption) * [`manage_pg_hba_conf`](#-postgresql--globals--manage_pg_hba_conf) * [`manage_pg_ident_conf`](#-postgresql--globals--manage_pg_ident_conf) * [`manage_recovery_conf`](#-postgresql--globals--manage_recovery_conf) * [`manage_postgresql_conf_perms`](#-postgresql--globals--manage_postgresql_conf_perms) * [`manage_selinux`](#-postgresql--globals--manage_selinux) * [`manage_datadir`](#-postgresql--globals--manage_datadir) * [`manage_logdir`](#-postgresql--globals--manage_logdir) * [`manage_xlogdir`](#-postgresql--globals--manage_xlogdir) * [`manage_package_repo`](#-postgresql--globals--manage_package_repo) * [`manage_dnf_module`](#-postgresql--globals--manage_dnf_module) * [`module_workdir`](#-postgresql--globals--module_workdir) ##### `client_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL client package name. Default value: `undef` ##### `server_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL server package name. Default value: `undef` ##### `contrib_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL contrib package name. Default value: `undef` ##### `devel_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL devel package name. Default value: `undef` ##### `java_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL java package name. Default value: `undef` ##### `docs_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL docs package name. Default value: `undef` ##### `perl_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL Perl package name. Default value: `undef` ##### `plperl_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL PL/Perl package name. Default value: `undef` ##### `plpython_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL PL/Python package name. Default value: `undef` ##### `python_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL Python package name. Default value: `undef` ##### `postgis_package_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL PostGIS package name. Default value: `undef` ##### `service_name` Data type: `Optional[String[1]]` Overrides the default PostgreSQL service name. Default value: `undef` ##### `service_provider` Data type: `Optional[String[1]]` Overrides the default PostgreSQL service provider. Default value: `undef` ##### `service_status` Data type: `Optional[String[1]]` Overrides the default status check command for your PostgreSQL service. Default value: `undef` ##### `default_database` Data type: `Optional[String[1]]` Specifies the name of the default database to connect with. Default value: `undef` ##### `validcon_script_path` Data type: `Optional[String[1]]` Scipt path for the connection validation check. Default value: `undef` ##### `initdb_path` Data type: `Optional[Stdlib::Absolutepath]` Path to the initdb command. Default value: `undef` ##### `psql_path` Data type: `Optional[Stdlib::Absolutepath]` Sets the path to the psql command. Default value: `undef` ##### `pg_hba_conf_path` Data type: `Optional[Stdlib::Absolutepath]` Specifies the path to your pg_hba.conf file. Default value: `undef` ##### `pg_ident_conf_path` Data type: `Optional[Stdlib::Absolutepath]` Specifies the path to your pg_ident.conf file. Default value: `undef` ##### `postgresql_conf_path` Data type: `Optional[Stdlib::Absolutepath]` Sets the path to your postgresql.conf file. Default value: `undef` ##### `postgresql_conf_mode` Data type: `Optional[Stdlib::Filemode]` Sets the mode of your postgresql.conf file. Only relevant if manage_postgresql_conf_perms is true. Default value: `undef` ##### `recovery_conf_path` Data type: `Optional[Stdlib::Absolutepath]` Path to your recovery.conf file. Default value: `undef` ##### `default_connect_settings` Data type: `Hash` Default connection settings. Default value: `{}` ##### `pg_hba_conf_defaults` Data type: `Optional[Boolean]` Disables the defaults supplied with the module for pg_hba.conf if set to false. Default value: `undef` ##### `datadir` Data type: `Optional[Stdlib::Absolutepath]` Overrides the default PostgreSQL data directory for the target platform. Changing the datadir after installation causes the server to come to a full stop before making the change. For Red Hat systems, the data directory must be labeled appropriately for SELinux. On Ubuntu, you must explicitly set needs_initdb = true to allow Puppet to initialize the database in the new datadir (needs_initdb defaults to true on other systems). Warning! If datadir is changed from the default, Puppet does not manage purging of the original data directory, which causes it to fail if the data directory is changed back to the original Default value: `undef` ##### `confdir` Data type: `Optional[Stdlib::Absolutepath]` Overrides the default PostgreSQL configuration directory for the target platform. Default value: `undef` ##### `bindir` Data type: `Optional[Stdlib::Absolutepath]` Overrides the default PostgreSQL binaries directory for the target platform. Default value: `undef` ##### `xlogdir` Data type: `Optional[Stdlib::Absolutepath]` Overrides the default PostgreSQL xlog directory. Default value: `undef` ##### `logdir` Data type: `Optional[Stdlib::Absolutepath]` Overrides the default PostgreSQL log directory. Default value: `undef` ##### `log_line_prefix` Data type: `Optional[String[1]]` Overrides the default PostgreSQL log prefix. Default value: `undef` ##### `user` Data type: `Optional[String[1]]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `undef` ##### `group` Data type: `Optional[String[1]]` Overrides the default postgres user group to be used for related files in the file system. Default value: `undef` ##### `version` Data type: `Optional[String[1]]` The version of PostgreSQL to install and manage. Default value: `undef` ##### `postgis_version` Data type: `Optional[String[1]]` Defines the version of PostGIS to install, if you install PostGIS. Default value: `undef` ##### `repo_proxy` Data type: `Optional[String[1]]` Sets the proxy option for the official PostgreSQL yum-repositories only. Default value: `undef` ##### `repo_baseurl` Data type: `Optional[String[1]]` Sets the baseurl for the PostgreSQL repository. Useful if you host your own mirror of the repository. Default value: `undef` ##### `yum_repo_commonurl` Data type: `Optional[String[1]]` Sets the url for the PostgreSQL common Yum repository. Useful if you host your own mirror of the YUM repository. Default value: `undef` ##### `apt_source_release` Data type: `Optional[String[1]]` Overrides the default release for the apt source. Default value: `undef` ##### `needs_initdb` Data type: `Optional[Boolean]` Explicitly calls the initdb operation after the server package is installed and before the PostgreSQL service is started. Default value: `undef` ##### `encoding` Data type: `Optional[String[1]]` Sets the default encoding for all databases created with this module. On certain operating systems, this is also used during the template1 initialization, so it becomes a default outside of the module as well. Default value: `undef` ##### `locale` Data type: `Optional[String[1]]` Sets the default database locale for all databases created with this module. On certain operating systems, this is also used during the template1 initialization, so it becomes a default outside of the module as well. On Debian, you'll need to ensure that the 'locales-all' package is installed for full functionality of PostgreSQL. Default value: `undef` ##### `data_checksums` Data type: `Optional[Boolean]` Use checksums on data pages to help detect corruption by the I/O system that would otherwise be silent. Warning: This option is used during initialization by initdb, and cannot be changed later. Default value: `undef` ##### `timezone` Data type: `Optional[String[1]]` Sets the default timezone of the postgresql server. The postgresql built-in default is taking the systems timezone information. Default value: `undef` ##### `password_encryption` Data type: `Optional[Postgresql::Pg_password_encryption]` Specify the type of encryption set for the password. Defaults to scram-sha-256 for PostgreSQL >= 14, otherwise md5. Default value: `undef` ##### `manage_pg_hba_conf` Data type: `Optional[Boolean]` Allow Puppet to manage the pg_hba.conf file. Default value: `undef` ##### `manage_pg_ident_conf` Data type: `Optional[Boolean]` Allow Puppet to manage the pg_ident.conf file. Default value: `undef` ##### `manage_recovery_conf` Data type: `Optional[Boolean]` Allow Puppet to manage the recovery.conf file. Default value: `undef` ##### `manage_postgresql_conf_perms` Data type: `Optional[Boolean]` Whether to manage the postgresql conf file permissions. This means owner, group and mode. Contents are not managed but should be managed through postgresql::server::config_entry. Default value: `undef` ##### `manage_selinux` Data type: `Optional[Boolean]` Allows Puppet to manage the appropriate configuration file for selinux. Default value: `undef` ##### `manage_datadir` Data type: `Optional[Boolean]` Set to false if you have file{ $datadir: } already defined Default value: `undef` ##### `manage_logdir` Data type: `Optional[Boolean]` Set to false if you have file{ $logdir: } already defined Default value: `undef` ##### `manage_xlogdir` Data type: `Optional[Boolean]` Set to false if you have file{ $xlogdir: } already defined Default value: `undef` ##### `manage_package_repo` Data type: `Optional[Boolean]` Sets up official PostgreSQL repositories on your host if set to true. Default value: `undef` ##### `manage_dnf_module` Data type: `Boolean` Manage the DNF module. This only makes sense on distributions that use DNF package manager, such as EL8, EL9 or Fedora. Default value: `false` ##### `module_workdir` Data type: `Optional[Stdlib::Absolutepath]` Specifies working directory under which the psql command should be executed. May need to specify if '/tmp' is on volume mounted with noexec option. Default value: `undef` ### `postgresql::lib::devel` This class installs postgresql development libraries. #### Parameters The following parameters are available in the `postgresql::lib::devel` class: * [`package_name`](#-postgresql--lib--devel--package_name) * [`package_ensure`](#-postgresql--lib--devel--package_ensure) * [`link_pg_config`](#-postgresql--lib--devel--link_pg_config) ##### `package_name` Data type: `String` Override devel package name Default value: `$postgresql::params::devel_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Ensure the development libraries are installed Default value: `'present'` ##### `link_pg_config` Data type: `Boolean` If the bin directory used by the PostgreSQL page is not /usr/bin or /usr/local/bin, symlinks pg_config from the package's bin dir into usr/bin (not applicable to Debian systems). Set to false to disable this behavior. Default value: `$postgresql::params::link_pg_config` ### `postgresql::lib::docs` Installs PostgreSQL bindings for Postgres-Docs. Set the following parameters if you have a custom version you would like to install. * **Note** Make sure to add any necessary yum or apt repositories if specifying a custom version. #### Parameters The following parameters are available in the `postgresql::lib::docs` class: * [`package_name`](#-postgresql--lib--docs--package_name) * [`package_ensure`](#-postgresql--lib--docs--package_ensure) ##### `package_name` Data type: `String` Specifies the name of the PostgreSQL docs package. Default value: `$postgresql::params::docs_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Whether the PostgreSQL docs package resource should be present. Default value: `'present'` ### `postgresql::lib::java` This class installs the postgresql jdbc connector. * **Note** Make sure to add any necessary yum or apt repositories if specifying a custom version. #### Parameters The following parameters are available in the `postgresql::lib::java` class: * [`package_name`](#-postgresql--lib--java--package_name) * [`package_ensure`](#-postgresql--lib--java--package_ensure) ##### `package_name` Data type: `String` Specifies the name of the PostgreSQL java package. Default value: `$postgresql::params::java_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Specifies whether the package is present. Default value: `'present'` ### `postgresql::lib::perl` This class installs the perl libs for postgresql. #### Parameters The following parameters are available in the `postgresql::lib::perl` class: * [`package_name`](#-postgresql--lib--perl--package_name) * [`package_ensure`](#-postgresql--lib--perl--package_ensure) ##### `package_name` Data type: `String` Specifies the name of the PostgreSQL perl package to install. Default value: `$postgresql::params::perl_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Ensure the perl libs for postgresql are installed. Default value: `'present'` ### `postgresql::lib::python` This class installs the python libs for postgresql. #### Parameters The following parameters are available in the `postgresql::lib::python` class: * [`package_name`](#-postgresql--lib--python--package_name) * [`package_ensure`](#-postgresql--lib--python--package_ensure) ##### `package_name` Data type: `String[1]` The name of the PostgreSQL Python package. Default value: `$postgresql::params::python_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Ensure the python libs for postgresql are installed. Default value: `'present'` ### `postgresql::server` This installs a PostgreSQL server #### Parameters The following parameters are available in the `postgresql::server` class: * [`postgres_password`](#-postgresql--server--postgres_password) * [`package_name`](#-postgresql--server--package_name) * [`package_ensure`](#-postgresql--server--package_ensure) * [`plperl_package_name`](#-postgresql--server--plperl_package_name) * [`plpython_package_name`](#-postgresql--server--plpython_package_name) * [`service_ensure`](#-postgresql--server--service_ensure) * [`service_enable`](#-postgresql--server--service_enable) * [`service_manage`](#-postgresql--server--service_manage) * [`service_name`](#-postgresql--server--service_name) * [`service_restart_on_change`](#-postgresql--server--service_restart_on_change) * [`service_provider`](#-postgresql--server--service_provider) * [`service_reload`](#-postgresql--server--service_reload) * [`service_status`](#-postgresql--server--service_status) * [`default_database`](#-postgresql--server--default_database) * [`default_connect_settings`](#-postgresql--server--default_connect_settings) * [`listen_addresses`](#-postgresql--server--listen_addresses) * [`port`](#-postgresql--server--port) * [`ip_mask_deny_postgres_user`](#-postgresql--server--ip_mask_deny_postgres_user) * [`ip_mask_allow_all_users`](#-postgresql--server--ip_mask_allow_all_users) * [`ipv4acls`](#-postgresql--server--ipv4acls) * [`ipv6acls`](#-postgresql--server--ipv6acls) * [`initdb_path`](#-postgresql--server--initdb_path) * [`psql_path`](#-postgresql--server--psql_path) * [`pg_hba_conf_path`](#-postgresql--server--pg_hba_conf_path) * [`pg_ident_conf_path`](#-postgresql--server--pg_ident_conf_path) * [`postgresql_conf_path`](#-postgresql--server--postgresql_conf_path) * [`postgresql_conf_mode`](#-postgresql--server--postgresql_conf_mode) * [`recovery_conf_path`](#-postgresql--server--recovery_conf_path) * [`datadir`](#-postgresql--server--datadir) * [`xlogdir`](#-postgresql--server--xlogdir) * [`logdir`](#-postgresql--server--logdir) * [`log_line_prefix`](#-postgresql--server--log_line_prefix) * [`pg_hba_conf_defaults`](#-postgresql--server--pg_hba_conf_defaults) * [`user`](#-postgresql--server--user) * [`group`](#-postgresql--server--group) * [`needs_initdb`](#-postgresql--server--needs_initdb) * [`encoding`](#-postgresql--server--encoding) * [`locale`](#-postgresql--server--locale) * [`data_checksums`](#-postgresql--server--data_checksums) * [`timezone`](#-postgresql--server--timezone) * [`manage_pg_hba_conf`](#-postgresql--server--manage_pg_hba_conf) * [`manage_pg_ident_conf`](#-postgresql--server--manage_pg_ident_conf) * [`manage_recovery_conf`](#-postgresql--server--manage_recovery_conf) * [`manage_postgresql_conf_perms`](#-postgresql--server--manage_postgresql_conf_perms) * [`manage_selinux`](#-postgresql--server--manage_selinux) * [`module_workdir`](#-postgresql--server--module_workdir) * [`manage_datadir`](#-postgresql--server--manage_datadir) * [`manage_logdir`](#-postgresql--server--manage_logdir) * [`manage_xlogdir`](#-postgresql--server--manage_xlogdir) * [`password_encryption`](#-postgresql--server--password_encryption) * [`pg_hba_auth_password_encryption`](#-postgresql--server--pg_hba_auth_password_encryption) * [`roles`](#-postgresql--server--roles) * [`config_entries`](#-postgresql--server--config_entries) * [`pg_hba_rules`](#-postgresql--server--pg_hba_rules) * [`backup_enable`](#-postgresql--server--backup_enable) * [`backup_options`](#-postgresql--server--backup_options) * [`backup_provider`](#-postgresql--server--backup_provider) * [`extra_systemd_config`](#-postgresql--server--extra_systemd_config) * [`auth_host`](#-postgresql--server--auth_host) * [`auth_local`](#-postgresql--server--auth_local) * [`lc_messages`](#-postgresql--server--lc_messages) * [`username`](#-postgresql--server--username) ##### `postgres_password` Data type: `Optional[Variant[String[1], Sensitive[String[1]], Integer]]` Sets the password for the postgres user to your specified value. By default, this setting uses the superuser account in the Postgres database, with a user called postgres and no password. Default value: `undef` ##### `package_name` Data type: `String[1]` Specifies the name of the package to use for installing the server software. Default value: `$postgresql::params::server_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Passes a value through to the package resource when creating the server instance. Default value: `$postgresql::params::package_ensure` ##### `plperl_package_name` Data type: `Optional[String[1]]` Sets the default package name for the PL/Perl extension. Default value: `$postgresql::params::plperl_package_name` ##### `plpython_package_name` Data type: `Optional[String[1]]` Sets the default package name for the PL/Python extension. Default value: `$postgresql::params::plpython_package_name` ##### `service_ensure` Data type: `Variant[Enum['running', 'stopped'], Boolean]` Ensure service is installed Default value: `$postgresql::params::service_ensure` ##### `service_enable` Data type: `Boolean` Enable the PostgreSQL service Default value: `$postgresql::params::service_enable` ##### `service_manage` Data type: `Boolean` Defines whether or not Puppet should manage the service. Default value: `$postgresql::params::service_manage` ##### `service_name` Data type: `String[1]` Overrides the default PostgreSQL service name. Default value: `$postgresql::params::service_name` ##### `service_restart_on_change` Data type: `Boolean` Overrides the default behavior to restart your PostgreSQL service when a config entry has been changed that requires a service restart to become active. Default value: `$postgresql::params::service_restart_on_change` ##### `service_provider` Data type: `Optional[String[1]]` Overrides the default PostgreSQL service provider. Default value: `$postgresql::params::service_provider` ##### `service_reload` Data type: `String[1]` Overrides the default reload command for your PostgreSQL service. Default value: `$postgresql::params::service_reload` ##### `service_status` Data type: `Optional[String[1]]` Overrides the default status check command for your PostgreSQL service. Default value: `$postgresql::params::service_status` ##### `default_database` Data type: `String[1]` Specifies the name of the default database to connect with. On most systems this is 'postgres'. Default value: `$postgresql::params::default_database` ##### `default_connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Becomes the default for other defined types, such as postgresql::server::role. Default value: `$postgresql::globals::default_connect_settings` ##### `listen_addresses` Data type: `Optional[Variant[String[1], Array[String[1]]]]` Address list on which the PostgreSQL service will listen Default value: `$postgresql::params::listen_addresses` ##### `port` Data type: `Stdlib::Port` Specifies the port for the PostgreSQL server to listen on. Note: The same port number is used for all IP addresses the server listens on. Also, for Red Hat systems and early Debian systems, changing the port causes the server to come to a full stop before being able to make the change. Default value: 5432. Meaning the Postgres server listens on TCP port 5432. Default value: `$postgresql::params::port` ##### `ip_mask_deny_postgres_user` Data type: `String[1]` Specifies the IP mask from which remote connections should be denied for the postgres superuser. Default value: '0.0.0.0/0', which denies any remote connection. Default value: `$postgresql::params::ip_mask_deny_postgres_user` ##### `ip_mask_allow_all_users` Data type: `String[1]` Overrides PostgreSQL defaults for remote connections. By default, PostgreSQL does not allow database user accounts to connect via TCP from remote machines. If you'd like to allow this, you can override this setting. Set to '0.0.0.0/0' to allow database users to connect from any remote machine, or '192.168.0.0/1' to allow connections from any machine on your local '192.168' subnet. Default value: '127.0.0.1/32'. Default value: `$postgresql::params::ip_mask_allow_all_users` ##### `ipv4acls` Data type: `Array[String[1]]` Lists strings for access control for connection method, users, databases, IPv4 addresses; Default value: `$postgresql::params::ipv4acls` ##### `ipv6acls` Data type: `Array[String[1]]` Lists strings for access control for connection method, users, databases, IPv6 addresses. Default value: `$postgresql::params::ipv6acls` ##### `initdb_path` Data type: `Stdlib::Absolutepath` Specifies the path to the initdb command. Default value: `$postgresql::params::initdb_path` ##### `psql_path` Data type: `Stdlib::Absolutepath` Specifies the path to the psql command. Default value: `$postgresql::params::psql_path` ##### `pg_hba_conf_path` Data type: `Stdlib::Absolutepath` Specifies the path to your pg_hba.conf file. Default value: `$postgresql::params::pg_hba_conf_path` ##### `pg_ident_conf_path` Data type: `Stdlib::Absolutepath` Specifies the path to your pg_ident.conf file. Default value: `$postgresql::params::pg_ident_conf_path` ##### `postgresql_conf_path` Data type: `Stdlib::Absolutepath` Specifies the path to your postgresql.conf file. Default value: `$postgresql::params::postgresql_conf_path` ##### `postgresql_conf_mode` Data type: `Optional[Stdlib::Filemode]` Sets the mode of your postgresql.conf file. Only relevant if manage_postgresql_conf_perms is true. Default value: `$postgresql::params::postgresql_conf_mode` ##### `recovery_conf_path` Data type: `Stdlib::Absolutepath` Specifies the path to your recovery.conf file. Default value: `$postgresql::params::recovery_conf_path` ##### `datadir` Data type: `Stdlib::Absolutepath` PostgreSQL data directory Default value: `$postgresql::params::datadir` ##### `xlogdir` Data type: `Optional[Stdlib::Absolutepath]` PostgreSQL xlog directory Default value: `$postgresql::params::xlogdir` ##### `logdir` Data type: `Optional[Stdlib::Absolutepath]` PostgreSQL log directory Default value: `$postgresql::params::logdir` ##### `log_line_prefix` Data type: `Optional[String[1]]` PostgreSQL log line prefix Default value: `$postgresql::params::log_line_prefix` ##### `pg_hba_conf_defaults` Data type: `Boolean` If false, disables the defaults supplied with the module for pg_hba.conf. This is useful if you disagree with the defaults and wish to override them yourself. Be sure that your changes of course align with the rest of the module, as some access is required to perform basic psql operations for example. Default value: `$postgresql::params::pg_hba_conf_defaults` ##### `user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `$postgresql::params::user` ##### `group` Data type: `String[1]` Overrides the default postgres user group to be used for related files in the file system. Default value: `$postgresql::params::group` ##### `needs_initdb` Data type: `Boolean` Explicitly calls the initdb operation after server package is installed, and before the PostgreSQL service is started. Default value: `$postgresql::params::needs_initdb` ##### `encoding` Data type: `Optional[String[1]]` Sets the default encoding for all databases created with this module. On certain operating systems this is also used during the template1 initialization, so it becomes a default outside of the module as well. Default value: `$postgresql::params::encoding` ##### `locale` Data type: `Optional[String[1]]` Sets the default database locale for all databases created with this module. On certain operating systems this is used during the template1 initialization as well, so it becomes a default outside of the module. Default value: `$postgresql::params::locale` ##### `data_checksums` Data type: `Optional[Boolean]` Use checksums on data pages to help detect corruption by the I/O system that would otherwise be silent. Warning: This option is used during initialization by initdb, and cannot be changed later. If set, checksums are calculated for all objects, in all databases. Default value: `$postgresql::params::data_checksums` ##### `timezone` Data type: `Optional[String[1]]` Set timezone for the PostgreSQL instance Default value: `$postgresql::params::timezone` ##### `manage_pg_hba_conf` Data type: `Boolean` Boolean. Whether to manage the pg_hba.conf. Default value: `$postgresql::params::manage_pg_hba_conf` ##### `manage_pg_ident_conf` Data type: `Boolean` Boolean. Overwrites the pg_ident.conf file. Default value: `$postgresql::params::manage_pg_ident_conf` ##### `manage_recovery_conf` Data type: `Boolean` Boolean. Specifies whether or not manage the recovery.conf. Default value: `$postgresql::params::manage_recovery_conf` ##### `manage_postgresql_conf_perms` Data type: `Boolean` Whether to manage the postgresql conf file permissions. This means owner, group and mode. Contents are not managed but should be managed through postgresql::server::config_entry. Default value: `$postgresql::params::manage_postgresql_conf_perms` ##### `manage_selinux` Data type: `Boolean` Specifies whether or not manage the conf file for selinux. Default value: `$postgresql::params::manage_selinux` ##### `module_workdir` Data type: `Stdlib::Absolutepath` Working directory for the PostgreSQL module Default value: `$postgresql::params::module_workdir` ##### `manage_datadir` Data type: `Boolean` Set to false if you have file{ $datadir: } already defined Default value: `$postgresql::params::manage_datadir` ##### `manage_logdir` Data type: `Boolean` Set to false if you have file{ $logdir: } already defined Default value: `$postgresql::params::manage_logdir` ##### `manage_xlogdir` Data type: `Boolean` Set to false if you have file{ $xlogdir: } already defined Default value: `$postgresql::params::manage_xlogdir` ##### `password_encryption` Data type: `Postgresql::Pg_password_encryption` Specify the type of encryption set for the password. Default value: `$postgresql::params::password_encryption` ##### `pg_hba_auth_password_encryption` Data type: `Optional[Postgresql::Pg_password_encryption]` Specify the type of encryption set for the password in pg_hba_conf, this value is usefull if you want to start enforcing scram-sha-256, but give users transition time. Default value: `undef` ##### `roles` Data type: `Hash[String, Hash]` Specifies a hash from which to generate postgresql::server::role resources. Default value: `{}` ##### `config_entries` Data type: `Hash[String, Any]` Specifies a hash from which to generate postgresql::server::config_entry resources. Default value: `{}` ##### `pg_hba_rules` Data type: `Postgresql::Pg_hba_rules` Specifies a hash from which to generate postgresql::server::pg_hba_rule resources. Default value: `{}` ##### `backup_enable` Data type: `Boolean` Whether a backup job should be enabled. Default value: `$postgresql::params::backup_enable` ##### `backup_options` Data type: `Hash` A hash of options that should be passed through to the backup provider. Default value: `{}` ##### `backup_provider` Data type: `Enum['pg_dump']` Specifies the backup provider to use. Default value: `$postgresql::params::backup_provider` ##### `extra_systemd_config` Data type: `Optional[String]` Adds extra config to systemd config file, can for instance be used to add extra openfiles. This can be a multi line string Default value: `$postgresql::params::extra_systemd_config` ##### `auth_host` Data type: `Optional[String[1]]` auth method used by default for host authorization Default value: `undef` ##### `auth_local` Data type: `Optional[String[1]]` auth method used by default for local authorization Default value: `undef` ##### `lc_messages` Data type: `Optional[String[1]]` locale used for logging and system messages Default value: `undef` ##### `username` Data type: `Optional[String[1]]` username of user running the postgres instance Default value: `$user` ### `postgresql::server::contrib` Install the contrib postgresql packaging. #### Parameters The following parameters are available in the `postgresql::server::contrib` class: * [`package_name`](#-postgresql--server--contrib--package_name) * [`package_ensure`](#-postgresql--server--contrib--package_ensure) ##### `package_name` Data type: `Optional[String[1]]` The name of the PostgreSQL contrib package. Default value: `$postgresql::params::contrib_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Ensure the contrib package is installed. Default value: `'present'` ### `postgresql::server::plperl` This class installs the PL/Perl procedural language for postgresql. #### Parameters The following parameters are available in the `postgresql::server::plperl` class: * [`package_ensure`](#-postgresql--server--plperl--package_ensure) * [`package_name`](#-postgresql--server--plperl--package_name) ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` The ensure parameter passed on to PostgreSQL PL/Perl package resource. Default value: `'present'` ##### `package_name` Data type: `Optional[String[1]]` The name of the PostgreSQL PL/Perl package. Default value: `$postgresql::server::plperl_package_name` ### `postgresql::server::plpython` This class installs the PL/Python procedural language for postgresql. #### Parameters The following parameters are available in the `postgresql::server::plpython` class: * [`package_ensure`](#-postgresql--server--plpython--package_ensure) * [`package_name`](#-postgresql--server--plpython--package_name) ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Specifies whether the package is present. Default value: `'present'` ##### `package_name` Data type: `Optional[String[1]]` Specifies the name of the postgresql PL/Python package. Default value: `$postgresql::server::plpython_package_name` ### `postgresql::server::postgis` Install the postgis postgresql packaging. #### Parameters The following parameters are available in the `postgresql::server::postgis` class: * [`package_name`](#-postgresql--server--postgis--package_name) * [`package_ensure`](#-postgresql--server--postgis--package_ensure) ##### `package_name` Data type: `String` Sets the package name. Default value: `$postgresql::params::postgis_package_name` ##### `package_ensure` Data type: `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]` Specifies if the package is present or not. Default value: `'present'` ## Defined types ### `postgresql::server::config_entry` Manage a postgresql.conf entry. #### Parameters The following parameters are available in the `postgresql::server::config_entry` defined type: * [`ensure`](#-postgresql--server--config_entry--ensure) * [`key`](#-postgresql--server--config_entry--key) * [`value`](#-postgresql--server--config_entry--value) * [`path`](#-postgresql--server--config_entry--path) * [`comment`](#-postgresql--server--config_entry--comment) * [`instance_name`](#-postgresql--server--config_entry--instance_name) ##### `ensure` Data type: `Enum['present', 'absent']` Removes an entry if set to 'absent'. Default value: `'present'` ##### `key` Data type: `String[1]` Defines the key/name for the setting. Defaults to $name Default value: `$name` ##### `value` Data type: `Optional[Variant[String[1], Numeric, Array[String[1]]]]` Defines the value for the setting. Default value: `undef` ##### `path` Data type: `Stdlib::Absolutepath` Path for postgresql.conf Default value: `$postgresql::server::postgresql_conf_path` ##### `comment` Data type: `Optional[String[1]]` Defines the comment for the setting. The # is added by default. Default value: `undef` ##### `instance_name` Data type: `String[1]` The name of the instance. Default value: `'main'` ### `postgresql::server::database` Define for creating a database. #### Parameters The following parameters are available in the `postgresql::server::database` defined type: * [`comment`](#-postgresql--server--database--comment) * [`dbname`](#-postgresql--server--database--dbname) * [`owner`](#-postgresql--server--database--owner) * [`tablespace`](#-postgresql--server--database--tablespace) * [`template`](#-postgresql--server--database--template) * [`encoding`](#-postgresql--server--database--encoding) * [`locale`](#-postgresql--server--database--locale) * [`istemplate`](#-postgresql--server--database--istemplate) * [`instance`](#-postgresql--server--database--instance) * [`connect_settings`](#-postgresql--server--database--connect_settings) * [`psql_path`](#-postgresql--server--database--psql_path) * [`default_db`](#-postgresql--server--database--default_db) * [`user`](#-postgresql--server--database--user) * [`group`](#-postgresql--server--database--group) * [`port`](#-postgresql--server--database--port) ##### `comment` Data type: `Optional[String[1]]` Sets a comment on the database. Default value: `undef` ##### `dbname` Data type: `String[1]` Sets the name of the database. Default value: `$title` ##### `owner` Data type: `Optional[String[1]]` Sets name of the database owner. Default value: `undef` ##### `tablespace` Data type: `Optional[String[1]]` Sets tablespace for where to create this database. Default value: `undef` ##### `template` Data type: `String[1]` Specifies the name of the template database from which to build this database. Default value: 'template0'. Default value: `'template0'` ##### `encoding` Data type: `Optional[String[1]]` Overrides the character set during creation of the database. Default value: `$postgresql::server::encoding` ##### `locale` Data type: `Optional[String[1]]` Overrides the locale during creation of the database. Default value: `$postgresql::server::locale` ##### `istemplate` Data type: `Boolean` Defines the database as a template if set to true. Default value: `false` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `psql_path` Data type: `Stdlib::Absolutepath` Specifies the path to the psql command. Default value: `$postgresql::server::psql_path` ##### `default_db` Data type: `String[1]` Specifies the name of the default database to connect with. On most systems this is 'postgres'. Default value: `$postgresql::server::default_database` ##### `user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `$postgresql::server::user` ##### `group` Data type: `String[1]` Overrides the default postgres user group to be used for related files in the file system. Default value: `$postgresql::server::group` ##### `port` Data type: `Stdlib::Port` Specifies the port for the PostgreSQL server to listen on. Default value: `$postgresql::server::port` ### `postgresql::server::database_grant` Manage a database grant. #### Parameters The following parameters are available in the `postgresql::server::database_grant` defined type: * [`privilege`](#-postgresql--server--database_grant--privilege) * [`db`](#-postgresql--server--database_grant--db) * [`role`](#-postgresql--server--database_grant--role) * [`ensure`](#-postgresql--server--database_grant--ensure) * [`psql_db`](#-postgresql--server--database_grant--psql_db) * [`psql_user`](#-postgresql--server--database_grant--psql_user) * [`psql_group`](#-postgresql--server--database_grant--psql_group) * [`connect_settings`](#-postgresql--server--database_grant--connect_settings) * [`port`](#-postgresql--server--database_grant--port) * [`instance`](#-postgresql--server--database_grant--instance) ##### `privilege` Data type: `Enum['ALL', 'CREATE', 'CONNECT', 'TEMPORARY', 'TEMP', 'all', 'create', 'connect', 'temporary', 'temp']` Specifies comma-separated list of privileges to grant. Valid options: 'ALL', 'CREATE', 'CONNECT', 'TEMPORARY', 'TEMP'. ##### `db` Data type: `String[1]` Specifies the database to which you are granting access. ##### `role` Data type: `String[1]` Specifies the role or user whom you are granting access to. ##### `ensure` Data type: `Optional[Enum['present', 'absent']]` Specifies whether to grant or revoke the privilege. Revoke or 'absent' works only in PostgreSQL version 9.1.24 or later. Default value: `undef` ##### `psql_db` Data type: `Optional[String[1]]` Defines the database to execute the grant against. This should not ordinarily be changed from the default Default value: `undef` ##### `psql_user` Data type: `String[1]` Specifies the OS user for running psql. Default value: The default user for the module, usually 'postgres'. Default value: `$postgresql::server::user` ##### `psql_group` Data type: `String[1]` Overrides the default postgres user group to be used for related files in the file system. Default value: `$postgresql::server::group` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `port` Data type: `Stdlib::Port` Port to use when connecting. Default value: `$postgresql::server::port` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server::db` Define for conveniently creating a role, database and assigning the correct permissions. #### Parameters The following parameters are available in the `postgresql::server::db` defined type: * [`user`](#-postgresql--server--db--user) * [`password`](#-postgresql--server--db--password) * [`comment`](#-postgresql--server--db--comment) * [`dbname`](#-postgresql--server--db--dbname) * [`encoding`](#-postgresql--server--db--encoding) * [`locale`](#-postgresql--server--db--locale) * [`grant`](#-postgresql--server--db--grant) * [`tablespace`](#-postgresql--server--db--tablespace) * [`template`](#-postgresql--server--db--template) * [`istemplate`](#-postgresql--server--db--istemplate) * [`owner`](#-postgresql--server--db--owner) * [`port`](#-postgresql--server--db--port) * [`psql_user`](#-postgresql--server--db--psql_user) * [`psql_group`](#-postgresql--server--db--psql_group) * [`instance`](#-postgresql--server--db--instance) ##### `user` Data type: `String[1]` User to assign access to the database upon creation (will be created if not defined elsewhere). Mandatory. ##### `password` Data type: `Optional[Variant[String, Sensitive[String]]]` Sets the password for the created user (if a user is created). Default value: `undef` ##### `comment` Data type: `Optional[String[1]]` Defines a comment to be stored about the database using the PostgreSQL COMMENT command. Default value: `undef` ##### `dbname` Data type: `String[1]` Sets the name of the database to be created. Default value: `$title` ##### `encoding` Data type: `Optional[String[1]]` Overrides the character set during creation of the database. Default value: `$postgresql::server::encoding` ##### `locale` Data type: `Optional[String[1]]` Overrides the locale during creation of the database. Default value: `$postgresql::server::locale` ##### `grant` Data type: `Variant[String[1], Array[String[1]]]` Specifies the permissions to grant during creation. Default value: 'ALL'. Default value: `'ALL'` ##### `tablespace` Data type: `Optional[String[1]]` Defines the name of the tablespace to allocate the created database to. Default value: `undef` ##### `template` Data type: `String[1]` Specifies the name of the template database from which to build this database. Defaults value: template0. Default value: `'template0'` ##### `istemplate` Data type: `Boolean` Specifies that the database is a template, if set to true. Default value: `false` ##### `owner` Data type: `Optional[String[1]]` Sets a user as the owner of the database. Default value: `undef` ##### `port` Data type: `Optional[Stdlib::Port]` Specifies the port where the PostgreSQL server is listening on. Default value: `undef` ##### `psql_user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `$postgresql::server::user` ##### `psql_group` Data type: `String[1]` Overrides the default PostgreSQL user group to be used for related files in the file system. Default value: `$postgresql::server::group` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server::default_privileges` Manage a database defaults privileges. Only works with PostgreSQL version 9.6 and above. #### Parameters The following parameters are available in the `postgresql::server::default_privileges` defined type: * [`target_role`](#-postgresql--server--default_privileges--target_role) * [`ensure`](#-postgresql--server--default_privileges--ensure) * [`role`](#-postgresql--server--default_privileges--role) * [`db`](#-postgresql--server--default_privileges--db) * [`object_type`](#-postgresql--server--default_privileges--object_type) * [`privilege`](#-postgresql--server--default_privileges--privilege) * [`schema`](#-postgresql--server--default_privileges--schema) * [`psql_db`](#-postgresql--server--default_privileges--psql_db) * [`psql_user`](#-postgresql--server--default_privileges--psql_user) * [`psql_path`](#-postgresql--server--default_privileges--psql_path) * [`port`](#-postgresql--server--default_privileges--port) * [`connect_settings`](#-postgresql--server--default_privileges--connect_settings) * [`instance`](#-postgresql--server--default_privileges--instance) * [`group`](#-postgresql--server--default_privileges--group) ##### `target_role` Data type: `Optional[String]` Target role whose created objects will receive the default privileges. Defaults to the current user. Default value: `undef` ##### `ensure` Data type: `Enum['present', 'absent']` Specifies whether to grant or revoke the privilege. Default value: `'present'` ##### `role` Data type: `String` Specifies the role or user whom you are granting access to. ##### `db` Data type: `String` Specifies the database to which you are granting access. ##### `object_type` Data type: ```puppet Pattern[ /(?i:^FUNCTIONS$)/, /(?i:^ROUTINES$)/, /(?i:^SEQUENCES$)/, /(?i:^TABLES$)/, /(?i:^TYPES$)/, /(?i:^SCHEMAS$)/ ] ``` Specify target object type: 'FUNCTIONS', 'ROUTINES', 'SEQUENCES', 'TABLES', 'TYPES'. ##### `privilege` Data type: `String` Specifies comma-separated list of privileges to grant. Valid options: depends on object type. ##### `schema` Data type: `String` Target schema. Defaults to 'public'. Can be set to '' to apply to all schemas. Default value: `'public'` ##### `psql_db` Data type: `String` Defines the database to execute the grant against. This should not ordinarily be changed from the default. Default value: `$postgresql::server::default_database` ##### `psql_user` Data type: `String` Specifies the OS user for running psql. Default value: The default user for the module, usually 'postgres'. Default value: `$postgresql::server::user` ##### `psql_path` Data type: `Stdlib::Absolutepath` Specifies the OS user for running psql. Default value: The default user for the module, usually 'postgres'. Default value: `$postgresql::server::psql_path` ##### `port` Data type: `Stdlib::Port` Specifies the port to access the server. Default value: The default user for the module, usually '5432'. Default value: `$postgresql::server::port` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ##### `group` Data type: `String` Specifies the user group to which the privileges will be granted. Default value: `$postgresql::server::group` ### `postgresql::server::extension` Activate an extension on a postgresql database. #### Parameters The following parameters are available in the `postgresql::server::extension` defined type: * [`database`](#-postgresql--server--extension--database) * [`extension`](#-postgresql--server--extension--extension) * [`schema`](#-postgresql--server--extension--schema) * [`version`](#-postgresql--server--extension--version) * [`ensure`](#-postgresql--server--extension--ensure) * [`package_name`](#-postgresql--server--extension--package_name) * [`package_ensure`](#-postgresql--server--extension--package_ensure) * [`port`](#-postgresql--server--extension--port) * [`connect_settings`](#-postgresql--server--extension--connect_settings) * [`database_resource_name`](#-postgresql--server--extension--database_resource_name) * [`instance`](#-postgresql--server--extension--instance) * [`psql_path`](#-postgresql--server--extension--psql_path) * [`user`](#-postgresql--server--extension--user) * [`group`](#-postgresql--server--extension--group) ##### `database` Data type: `String[1]` Specifies the database on which to activate the extension. ##### `extension` Data type: `String[1]` Specifies the extension to activate. If left blank, uses the name of the resource. Default value: `$name` ##### `schema` Data type: `Optional[String[1]]` Specifies the schema on which to activate the extension. Default value: `undef` ##### `version` Data type: `Optional[String[1]]` Specifies the version of the extension which the database uses. When an extension package is updated, this does not automatically change the effective version in each database. This needs be updated using the PostgreSQL-specific SQL ALTER EXTENSION... version may be set to latest, in which case the SQL ALTER EXTENSION "extension" UPDATE is applied to this database (only). version may be set to a specific version, in which case the extension is updated using ALTER EXTENSION "extension" UPDATE TO 'version' eg. If extension is set to postgis and version is set to 2.3.3, this will apply the SQL ALTER EXTENSION "postgis" UPDATE TO '2.3.3' to this database only. version may be omitted, in which case no ALTER EXTENSION... SQL is applied, and the version will be left unchanged. Default value: `undef` ##### `ensure` Data type: `Enum['present', 'absent']` Specifies whether to activate or deactivate the extension. Valid options: 'present' or 'absent'. Default value: `'present'` ##### `package_name` Data type: `Optional[String[1]]` Specifies a package to install prior to activating the extension. Default value: `undef` ##### `package_ensure` Data type: `Optional[Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]]` Overrides default package deletion behavior. By default, the package specified with package_name is installed when the extension is activated and removed when the extension is deactivated. To override this behavior, set the ensure value for the package. Default value: `undef` ##### `port` Data type: `Stdlib::Port` Port to use when connecting. Default value: `postgresql::default('port')` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `postgresql::default('default_connect_settings')` ##### `database_resource_name` Data type: `String[1]` Specifies the resource name of the DB being managed. Defaults to the parameter $database, if left blank. Default value: `$database` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ##### `psql_path` Data type: `Stdlib::Absolutepath` Specifies the path to the psql command. Default value: `postgresql::default('psql_path')` ##### `user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `postgresql::default('user')` ##### `group` Data type: `String[1]` Overrides the default postgres user group to be used for related files in the file system. Default value: `postgresql::default('group')` ### `postgresql::server::grant` Define for granting permissions to roles. #### Parameters The following parameters are available in the `postgresql::server::grant` defined type: * [`role`](#-postgresql--server--grant--role) * [`db`](#-postgresql--server--grant--db) * [`privilege`](#-postgresql--server--grant--privilege) * [`object_type`](#-postgresql--server--grant--object_type) * [`object_name`](#-postgresql--server--grant--object_name) * [`object_arguments`](#-postgresql--server--grant--object_arguments) * [`psql_db`](#-postgresql--server--grant--psql_db) * [`psql_user`](#-postgresql--server--grant--psql_user) * [`port`](#-postgresql--server--grant--port) * [`onlyif_exists`](#-postgresql--server--grant--onlyif_exists) * [`connect_settings`](#-postgresql--server--grant--connect_settings) * [`ensure`](#-postgresql--server--grant--ensure) * [`group`](#-postgresql--server--grant--group) * [`psql_path`](#-postgresql--server--grant--psql_path) * [`instance`](#-postgresql--server--grant--instance) ##### `role` Data type: `String` Specifies the role or user whom you are granting access to. ##### `db` Data type: `String` Specifies the database to which you are granting access. ##### `privilege` Data type: `String` Specifies the privilege to grant. Valid options: 'ALL', 'ALL PRIVILEGES' or 'object_type' dependent string. Default value: `''` ##### `object_type` Data type: ```puppet Pattern[#/(?i:^COLUMN$)/, /(?i:^ALL SEQUENCES IN SCHEMA$)/, /(?i:^ALL TABLES IN SCHEMA$)/, /(?i:^DATABASE$)/, #/(?i:^FOREIGN DATA WRAPPER$)/, #/(?i:^FOREIGN SERVER$)/, /(?i:^FUNCTION$)/, /(?i:^LANGUAGE$)/, #/(?i:^PROCEDURAL LANGUAGE$)/, /(?i:^TABLE$)/, #/(?i:^TABLESPACE$)/, /(?i:^SCHEMA$)/, /(?i:^SEQUENCE$)/ #/(?i:^VIEW$)/ ] ``` Specifies the type of object to which you are granting privileges. Valid options: 'DATABASE', 'SCHEMA', 'SEQUENCE', 'ALL SEQUENCES IN SCHEMA', 'TABLE' or 'ALL TABLES IN SCHEMA'. Default value: `'database'` ##### `object_name` Data type: `Optional[Variant[Array[String,2,2],String[1]]]` Specifies name of object_type to which to grant access, can be either a string or a two element array. String: 'object_name' Array: ['schema_name', 'object_name'] Default value: `undef` ##### `object_arguments` Data type: `Array[String[1],0]` Specifies any arguments to be passed alongisde the access grant. Default value: `[]` ##### `psql_db` Data type: `String` Specifies the database to execute the grant against. This should not ordinarily be changed from the default Default value: `$postgresql::server::default_database` ##### `psql_user` Data type: `String` Sets the OS user to run psql. Default value: `$postgresql::server::user` ##### `port` Data type: `Stdlib::Port` Port to use when connecting. Default value: `$postgresql::server::port` ##### `onlyif_exists` Data type: `Boolean` Create grant only if doesn't exist Default value: `false` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `ensure` Data type: `Enum['present', 'absent']` Specifies whether to grant or revoke the privilege. Default is to grant the privilege. Valid values: 'present', 'absent'. Default value: `'present'` ##### `group` Data type: `String` Sets the OS group to run psql Default value: `$postgresql::server::group` ##### `psql_path` Data type: `Stdlib::Absolutepath` Sets the path to psql command Default value: `$postgresql::server::psql_path` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server::grant_role` Define for granting membership to a role. #### Parameters The following parameters are available in the `postgresql::server::grant_role` defined type: * [`group`](#-postgresql--server--grant_role--group) * [`role`](#-postgresql--server--grant_role--role) * [`ensure`](#-postgresql--server--grant_role--ensure) * [`psql_db`](#-postgresql--server--grant_role--psql_db) * [`psql_user`](#-postgresql--server--grant_role--psql_user) * [`port`](#-postgresql--server--grant_role--port) * [`connect_settings`](#-postgresql--server--grant_role--connect_settings) * [`instance`](#-postgresql--server--grant_role--instance) ##### `group` Data type: `String[1]` Specifies the group role to which you are assigning a role. ##### `role` Data type: `String[1]` Specifies the role you want to assign to a group. If left blank, uses the name of the resource. Default value: `$name` ##### `ensure` Data type: `Enum['present', 'absent']` Specifies whether to grant or revoke the membership. Valid options: 'present' or 'absent'. Default value: `'present'` ##### `psql_db` Data type: `String[1]` Specifies the database to execute the grant against. This should not ordinarily be changed from the default Default value: `$postgresql::server::default_database` ##### `psql_user` Data type: `String[1]` Sets the OS user to run psql. Default value: `$postgresql::server::user` ##### `port` Data type: `Stdlib::Port` Port to use when connecting. Default value: `$postgresql::server::port` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server::instance::config` Manages the config for a postgresql::server instance #### Parameters The following parameters are available in the `postgresql::server::instance::config` defined type: * [`ip_mask_deny_postgres_user`](#-postgresql--server--instance--config--ip_mask_deny_postgres_user) * [`ip_mask_allow_all_users`](#-postgresql--server--instance--config--ip_mask_allow_all_users) * [`listen_addresses`](#-postgresql--server--instance--config--listen_addresses) * [`port`](#-postgresql--server--instance--config--port) * [`ipv4acls`](#-postgresql--server--instance--config--ipv4acls) * [`ipv6acls`](#-postgresql--server--instance--config--ipv6acls) * [`pg_hba_conf_path`](#-postgresql--server--instance--config--pg_hba_conf_path) * [`pg_ident_conf_path`](#-postgresql--server--instance--config--pg_ident_conf_path) * [`postgresql_conf_path`](#-postgresql--server--instance--config--postgresql_conf_path) * [`postgresql_conf_mode`](#-postgresql--server--instance--config--postgresql_conf_mode) * [`recovery_conf_path`](#-postgresql--server--instance--config--recovery_conf_path) * [`pg_hba_conf_defaults`](#-postgresql--server--instance--config--pg_hba_conf_defaults) * [`user`](#-postgresql--server--instance--config--user) * [`group`](#-postgresql--server--instance--config--group) * [`version`](#-postgresql--server--instance--config--version) * [`manage_pg_hba_conf`](#-postgresql--server--instance--config--manage_pg_hba_conf) * [`manage_pg_ident_conf`](#-postgresql--server--instance--config--manage_pg_ident_conf) * [`manage_recovery_conf`](#-postgresql--server--instance--config--manage_recovery_conf) * [`manage_postgresql_conf_perms`](#-postgresql--server--instance--config--manage_postgresql_conf_perms) * [`datadir`](#-postgresql--server--instance--config--datadir) * [`logdir`](#-postgresql--server--instance--config--logdir) * [`service_name`](#-postgresql--server--instance--config--service_name) * [`service_enable`](#-postgresql--server--instance--config--service_enable) * [`log_line_prefix`](#-postgresql--server--instance--config--log_line_prefix) * [`timezone`](#-postgresql--server--instance--config--timezone) * [`password_encryption`](#-postgresql--server--instance--config--password_encryption) * [`pg_hba_auth_password_encryption`](#-postgresql--server--instance--config--pg_hba_auth_password_encryption) * [`extra_systemd_config`](#-postgresql--server--instance--config--extra_systemd_config) * [`manage_selinux`](#-postgresql--server--instance--config--manage_selinux) ##### `ip_mask_deny_postgres_user` Data type: `String[1]` Specifies the IP mask from which remote connections should be denied for the postgres superuser. Default value: '0.0.0.0/0', which denies any remote connection. Default value: `$postgresql::server::ip_mask_deny_postgres_user` ##### `ip_mask_allow_all_users` Data type: `String[1]` Overrides PostgreSQL defaults for remote connections. By default, PostgreSQL does not allow database user accounts to connect via TCP from remote machines. If you'd like to allow this, you can override this setting. Set to '0.0.0.0/0' to allow database users to connect from any remote machine, or '192.168.0.0/1' to allow connections from any machine on your local '192.168' subnet. Default value: '127.0.0.1/32'. Default value: `$postgresql::server::ip_mask_allow_all_users` ##### `listen_addresses` Data type: `Optional[Variant[String[1], Array[String[1]]]]` Address list on which the PostgreSQL service will listen Default value: `$postgresql::server::listen_addresses` ##### `port` Data type: `Stdlib::Port` Specifies the port for the PostgreSQL server to listen on. Note: The same port number is used for all IP addresses the server listens on. Also, for Red Hat systems and early Debian systems, changing the port causes the server to come to a full stop before being able to make the change. Default value: 5432. Meaning the Postgres server listens on TCP port 5432. Default value: `$postgresql::server::port` ##### `ipv4acls` Data type: `Array[String[1]]` Lists strings for access control for connection method, users, databases, IPv4 addresses. Default value: `$postgresql::server::ipv4acls` ##### `ipv6acls` Data type: `Array[String[1]]` Lists strings for access control for connection method, users, databases, IPv6 addresses. Default value: `$postgresql::server::ipv6acls` ##### `pg_hba_conf_path` Data type: `Stdlib::Absolutepath` Specifies the path to your pg_hba.conf file. Default value: `$postgresql::server::pg_hba_conf_path` ##### `pg_ident_conf_path` Data type: `Stdlib::Absolutepath` Specifies the path to your pg_ident.conf file. Default value: `$postgresql::server::pg_ident_conf_path` ##### `postgresql_conf_path` Data type: `Stdlib::Absolutepath` Specifies the path to your postgresql.conf file. Default value: `$postgresql::server::postgresql_conf_path` ##### `postgresql_conf_mode` Data type: `Optional[Stdlib::Filemode]` Sets the mode of your postgresql.conf file. Only relevant if manage_postgresql_conf_perms is true. Default value: `$postgresql::server::postgresql_conf_mode` ##### `recovery_conf_path` Data type: `Stdlib::Absolutepath` Specifies the path to your recovery.conf file. Default value: `$postgresql::server::recovery_conf_path` ##### `pg_hba_conf_defaults` Data type: `Boolean` If false, disables the defaults supplied with the module for pg_hba.conf. This is useful if you disagree with the defaults and wish to override them yourself. Be sure that your changes of course align with the rest of the module, as some access is required to perform basic psql operations for example. Default value: `$postgresql::server::pg_hba_conf_defaults` ##### `user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `$postgresql::server::user` ##### `group` Data type: `String[1]` Overrides the default postgres user group to be used for related files in the file system. Default value: `$postgresql::server::group` ##### `version` Data type: `Optional[String[1]]` Sets PostgreSQL version Default value: `$postgresql::server::_version` ##### `manage_pg_hba_conf` Data type: `Boolean` Boolean. Whether to manage the pg_hba.conf. Default value: `$postgresql::server::manage_pg_hba_conf` ##### `manage_pg_ident_conf` Data type: `Boolean` Boolean. Overwrites the pg_ident.conf file. Default value: `$postgresql::server::manage_pg_ident_conf` ##### `manage_recovery_conf` Data type: `Boolean` Boolean. Specifies whether or not manage the recovery.conf. Default value: `$postgresql::server::manage_recovery_conf` ##### `manage_postgresql_conf_perms` Data type: `Boolean` Whether to manage the postgresql conf file permissions. This means owner, group and mode. Contents are not managed but should be managed through postgresql::server::config_entry. Default value: `$postgresql::server::manage_postgresql_conf_perms` ##### `datadir` Data type: `Stdlib::Absolutepath` PostgreSQL data directory Default value: `$postgresql::server::datadir` ##### `logdir` Data type: `Optional[Stdlib::Absolutepath]` PostgreSQL log directory Default value: `$postgresql::server::logdir` ##### `service_name` Data type: `String[1]` Overrides the default PostgreSQL service name. Default value: `$postgresql::server::service_name` ##### `service_enable` Data type: `Boolean` Enable the PostgreSQL service Default value: `$postgresql::server::service_enable` ##### `log_line_prefix` Data type: `Optional[String[1]]` PostgreSQL log line prefix Default value: `$postgresql::server::log_line_prefix` ##### `timezone` Data type: `Optional[String[1]]` Set timezone for the PostgreSQL instance Default value: `$postgresql::server::timezone` ##### `password_encryption` Data type: `Postgresql::Pg_password_encryption` Specify the type of encryption set for the password. Default value: `$postgresql::server::password_encryption` ##### `pg_hba_auth_password_encryption` Data type: `Optional[Postgresql::Pg_password_encryption]` Specify the type of encryption set for the password in pg_hba_conf, this value is usefull if you want to start enforcing scram-sha-256, but give users transition time. Default value: `$postgresql::server::pg_hba_auth_password_encryption` ##### `extra_systemd_config` Data type: `Optional[String]` Adds extra config to systemd config file, can for instance be used to add extra openfiles. This can be a multi line string Default value: `$postgresql::server::extra_systemd_config` ##### `manage_selinux` Data type: `Boolean` Specifies whether or not manage the conf file for selinux. Default value: `$postgresql::server::manage_selinux` ### `postgresql::server::instance::initdb` Manages initdb feature for a postgresql::server instance #### Parameters The following parameters are available in the `postgresql::server::instance::initdb` defined type: * [`auth_host`](#-postgresql--server--instance--initdb--auth_host) * [`auth_local`](#-postgresql--server--instance--initdb--auth_local) * [`data_checksums`](#-postgresql--server--instance--initdb--data_checksums) * [`datadir`](#-postgresql--server--instance--initdb--datadir) * [`encoding`](#-postgresql--server--instance--initdb--encoding) * [`group`](#-postgresql--server--instance--initdb--group) * [`initdb_path`](#-postgresql--server--instance--initdb--initdb_path) * [`lc_messages`](#-postgresql--server--instance--initdb--lc_messages) * [`locale`](#-postgresql--server--instance--initdb--locale) * [`logdir`](#-postgresql--server--instance--initdb--logdir) * [`manage_datadir`](#-postgresql--server--instance--initdb--manage_datadir) * [`manage_logdir`](#-postgresql--server--instance--initdb--manage_logdir) * [`manage_xlogdir`](#-postgresql--server--instance--initdb--manage_xlogdir) * [`module_workdir`](#-postgresql--server--instance--initdb--module_workdir) * [`needs_initdb`](#-postgresql--server--instance--initdb--needs_initdb) * [`user`](#-postgresql--server--instance--initdb--user) * [`username`](#-postgresql--server--instance--initdb--username) * [`xlogdir`](#-postgresql--server--instance--initdb--xlogdir) * [`port`](#-postgresql--server--instance--initdb--port) * [`psql_path`](#-postgresql--server--instance--initdb--psql_path) ##### `auth_host` Data type: `Optional[String[1]]` auth method used by default for host authorization Default value: `$postgresql::server::auth_host` ##### `auth_local` Data type: `Optional[String[1]]` auth method used by default for local authorization Default value: `$postgresql::server::auth_local` ##### `data_checksums` Data type: `Optional[Boolean]` Boolean. Use checksums on data pages to help detect corruption by the I/O system that would otherwise be silent. Default value: `$postgresql::server::data_checksums` ##### `datadir` Data type: `Stdlib::Absolutepath` PostgreSQL data directory Default value: `$postgresql::server::datadir` ##### `encoding` Data type: `Optional[String[1]]` Sets the default encoding for all databases created with this module. On certain operating systems this is also used during the template1 initialization, so it becomes a default outside of the module as well. Default value: `$postgresql::server::encoding` ##### `group` Data type: `String[1]` Overrides the default postgres user group to be used for related files in the file system. Default value: `$postgresql::server::group` ##### `initdb_path` Data type: `Stdlib::Absolutepath` Specifies the path to the initdb command. Default value: `$postgresql::server::initdb_path` ##### `lc_messages` Data type: `Optional[String[1]]` locale used for logging and system messages Default value: `$postgresql::server::lc_messages` ##### `locale` Data type: `Optional[String[1]]` Sets the default database locale for all databases created with this module. On certain operating systems this is used during the template1 initialization as well, so it becomes a default outside of the module. Warning: This option is used during initialization by initdb, and cannot be changed later. If set, checksums are calculated for all objects, in all databases. Default value: `$postgresql::server::locale` ##### `logdir` Data type: `Optional[Stdlib::Absolutepath]` PostgreSQL log directory Default value: `$postgresql::server::logdir` ##### `manage_datadir` Data type: `Boolean` Set to false if you have file{ $datadir: } already defined Default value: `$postgresql::server::manage_datadir` ##### `manage_logdir` Data type: `Boolean` Set to false if you have file{ $logdir: } already defined Default value: `$postgresql::server::manage_logdir` ##### `manage_xlogdir` Data type: `Boolean` Set to false if you have file{ $xlogdir: } already defined Default value: `$postgresql::server::manage_xlogdir` ##### `module_workdir` Data type: `Stdlib::Absolutepath` Working directory for the PostgreSQL module Default value: `$postgresql::server::module_workdir` ##### `needs_initdb` Data type: `Boolean` Explicitly calls the initdb operation after server package is installed and before the PostgreSQL service is started. Default value: `$postgresql::server::needs_initdb` ##### `user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `$postgresql::server::user` ##### `username` Data type: `Optional[String[1]]` username of user running the postgres instance Default value: `$postgresql::server::username` ##### `xlogdir` Data type: `Optional[Stdlib::Absolutepath]` PostgreSQL xlog/WAL directory Default value: `$postgresql::server::xlogdir` ##### `port` Data type: `Stdlib::Port` Specifies the port for the PostgreSQL server to listen on. Note: The same port number is used for all IP addresses the server listens on. Also, for Red Hat systems and early Debian systems, changing the port causes the server to come to a full stop before being able to make the change. Default value: `$postgresql::server::port` ##### `psql_path` Data type: `Stdlib::Absolutepath` Specifies the path to the psql command. Default value: `$postgresql::server::psql_path` ### `postgresql::server::instance::late_initdb` Manage the default encoding when database initialization is managed by the package #### Parameters The following parameters are available in the `postgresql::server::instance::late_initdb` defined type: * [`encoding`](#-postgresql--server--instance--late_initdb--encoding) * [`user`](#-postgresql--server--instance--late_initdb--user) * [`group`](#-postgresql--server--instance--late_initdb--group) * [`psql_path`](#-postgresql--server--instance--late_initdb--psql_path) * [`port`](#-postgresql--server--instance--late_initdb--port) * [`module_workdir`](#-postgresql--server--instance--late_initdb--module_workdir) ##### `encoding` Data type: `Optional[String[1]]` Sets the default encoding for all databases created with this module. On certain operating systems this is also used during the template1 initialization, so it becomes a default outside of the module as well. Default value: `$postgresql::server::encoding` ##### `user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `$postgresql::server::user` ##### `group` Data type: `String[1]` Overrides the default postgres user group to be used for related files in the file system. Default value: `$postgresql::server::group` ##### `psql_path` Data type: `Stdlib::Absolutepath` Specifies the path to the psql command. Default value: `$postgresql::server::psql_path` ##### `port` Data type: `Stdlib::Port` Specifies the port for the PostgreSQL server to listen on. Note: The same port number is used for all IP addresses the server listens on. Also, for Red Hat systems and early Debian systems, changing the port causes the server to come to a full stop before being able to make the change. Default value: `$postgresql::server::port` ##### `module_workdir` Data type: `Stdlib::Absolutepath` Working directory for the PostgreSQL module Default value: `$postgresql::server::module_workdir` ### `postgresql::server::instance::passwd` Overrides the default PostgreSQL superuser #### Parameters The following parameters are available in the `postgresql::server::instance::passwd` defined type: * [`user`](#-postgresql--server--instance--passwd--user) * [`group`](#-postgresql--server--instance--passwd--group) * [`psql_path`](#-postgresql--server--instance--passwd--psql_path) * [`port`](#-postgresql--server--instance--passwd--port) * [`database`](#-postgresql--server--instance--passwd--database) * [`module_workdir`](#-postgresql--server--instance--passwd--module_workdir) * [`postgres_password`](#-postgresql--server--instance--passwd--postgres_password) ##### `user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `$postgresql::server::user` ##### `group` Data type: `String[1]` Overrides the default postgres user group to be used for related files in the file system. Default value: 5432. Meaning the Postgres server listens on TCP port 5432. Default value: `$postgresql::server::group` ##### `psql_path` Data type: `Stdlib::Absolutepath` Specifies the path to the psql command. Default value: `$postgresql::server::psql_path` ##### `port` Data type: `Stdlib::Port` Specifies the port for the PostgreSQL server to listen on. Note: The same port number is used for all IP addresses the server listens on. Also, for Red Hat systems and early Debian systems, changing the port causes the server to come to a full stop before being able to make the change. Default value: `$postgresql::server::port` ##### `database` Data type: `String[1]` Specifies the name of the database to connect with. On most systems this is 'postgres'. Default value: `$postgresql::server::default_database` ##### `module_workdir` Data type: `Stdlib::Absolutepath` Working directory for the PostgreSQL module Default value: `$postgresql::server::module_workdir` ##### `postgres_password` Data type: `Optional[Variant[String[1], Sensitive[String[1]], Integer]]` Sets the password for the postgres user to your specified value. By default, this setting uses the superuser account in the Postgres database, with a user called postgres and no password. Default value: `$postgresql::server::postgres_password` ### `postgresql::server::instance::reload` Overrides the default reload or status command for your PostgreSQL service #### Parameters The following parameters are available in the `postgresql::server::instance::reload` defined type: * [`service_reload`](#-postgresql--server--instance--reload--service_reload) * [`service_status`](#-postgresql--server--instance--reload--service_status) ##### `service_reload` Data type: `String[1]` Overrides the default reload command for your PostgreSQL service. Default value: `$postgresql::server::service_reload` ##### `service_status` Data type: `String[1]` Overrides the default status check command for your PostgreSQL service. Default value: `$postgresql::server::service_status` ### `postgresql::server::instance::service` Manages the service for the postgres main instance (default) or additional instances #### Parameters The following parameters are available in the `postgresql::server::instance::service` defined type: * [`service_ensure`](#-postgresql--server--instance--service--service_ensure) * [`service_enable`](#-postgresql--server--instance--service--service_enable) * [`service_manage`](#-postgresql--server--instance--service--service_manage) * [`service_name`](#-postgresql--server--instance--service--service_name) * [`service_provider`](#-postgresql--server--instance--service--service_provider) * [`service_status`](#-postgresql--server--instance--service--service_status) * [`user`](#-postgresql--server--instance--service--user) * [`port`](#-postgresql--server--instance--service--port) * [`default_database`](#-postgresql--server--instance--service--default_database) * [`psql_path`](#-postgresql--server--instance--service--psql_path) * [`connect_settings`](#-postgresql--server--instance--service--connect_settings) ##### `service_ensure` Data type: `Variant[Enum['running', 'stopped'], Boolean]` Ensure service is installed Default value: `$postgresql::server::service_ensure` ##### `service_enable` Data type: `Boolean` Enable the PostgreSQL service Default value: `$postgresql::server::service_enable` ##### `service_manage` Data type: `Boolean` Defines whether or not Puppet should manage the service. Default value: `$postgresql::server::service_manage` ##### `service_name` Data type: `String[1]` Overrides the default PostgreSQL service name. Default value: `$postgresql::server::service_name` ##### `service_provider` Data type: `Optional[String[1]]` Overrides the default PostgreSQL service provider. Default value: `$postgresql::server::service_provider` ##### `service_status` Data type: `String[1]` Overrides the default status check command for your PostgreSQL service. Default value: `$postgresql::server::service_status` ##### `user` Data type: `String[1]` Overrides the default PostgreSQL super user and owner of PostgreSQL related files in the file system. Default value: `$postgresql::server::user` ##### `port` Data type: `Stdlib::Port` Specifies the port for the PostgreSQL server to listen on. Note: The same port number is used for all IP addresses the server listens on. Also, for Red Hat systems and early Debian systems, changing the port causes the server to come to a full stop before being able to make the change. Default value: 5432. Meaning the Postgres server listens on TCP port 5432. Default value: `$postgresql::server::port` ##### `default_database` Data type: `String[1]` Specifies the name of the default database to connect with. On most systems this is 'postgres'. Default value: `$postgresql::server::default_database` ##### `psql_path` Data type: `Stdlib::Absolutepath` Specifies the path to the psql command. Default value: `$postgresql::server::psql_path` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Becomes the default for other defined types, such as postgresql::server::role. Default value: `$postgresql::server::default_connect_settings` ### `postgresql::server::pg_hba_rule` This resource manages an individual rule that applies to the file defined in target. #### Parameters The following parameters are available in the `postgresql::server::pg_hba_rule` defined type: * [`type`](#-postgresql--server--pg_hba_rule--type) * [`database`](#-postgresql--server--pg_hba_rule--database) * [`user`](#-postgresql--server--pg_hba_rule--user) * [`auth_method`](#-postgresql--server--pg_hba_rule--auth_method) * [`address`](#-postgresql--server--pg_hba_rule--address) * [`description`](#-postgresql--server--pg_hba_rule--description) * [`auth_option`](#-postgresql--server--pg_hba_rule--auth_option) * [`order`](#-postgresql--server--pg_hba_rule--order) * [`target`](#-postgresql--server--pg_hba_rule--target) * [`postgresql_version`](#-postgresql--server--pg_hba_rule--postgresql_version) ##### `type` Data type: `Postgresql::Pg_hba_rule_type` Sets the type of rule. ##### `database` Data type: `String[1]` Sets a comma-separated list of databases that this rule matches. ##### `user` Data type: `String[1]` Sets a comma-separated list of users that this rule matches. ##### `auth_method` Data type: `String[1]` Provides the method that is used for authentication for the connection that this rule matches. Described further in the PostgreSQL pg_hba.conf documentation. ##### `address` Data type: `Optional[Postgresql::Pg_hba_rule_address]` Sets a address for this rule matching when the type is not 'local'. Value can either be IPv4 CIDR, IPv6 CIDR, a FQDN, the strings 'all', 'samehost' or 'samenet' or a domain either with or without starting dot (.) https://www.postgresql.org/docs/current/auth-pg-hba-conf.html Default value: `undef` ##### `description` Data type: `String[1]` Defines a longer description for this rule, if required. This description is placed in the comments above the rule in pg_hba.conf. Default value: 'none'. Default value: `'none'` ##### `auth_option` Data type: `Optional[String]` For certain auth_method settings there are extra options that can be passed. Consult the PostgreSQL pg_hba.conf documentation for further details. Default value: `undef` ##### `order` Data type: `Variant[String, Integer]` Sets an order for placing the rule in pg_hba.conf. This can be either a string or an integer. If it is an integer, it will be converted to a string by zero-padding it to three digits. E.g. 42 will be zero-padded to the string '042'. The pg_hba_rule fragments are sorted using the alpha sorting order. Default value: 150. Default value: `150` ##### `target` Data type: `Stdlib::Absolutepath` Provides the target for the rule, and is generally an internal only property. Use with caution. Default value: `$postgresql::server::pg_hba_conf_path` ##### `postgresql_version` Data type: `String` Manages pg_hba.conf without managing the entire PostgreSQL instance. Default value: `$postgresql::server::_version` ### `postgresql::server::pg_ident_rule` This resource manages an individual rule that applies to the file defined in target. #### Parameters The following parameters are available in the `postgresql::server::pg_ident_rule` defined type: * [`map_name`](#-postgresql--server--pg_ident_rule--map_name) * [`system_username`](#-postgresql--server--pg_ident_rule--system_username) * [`database_username`](#-postgresql--server--pg_ident_rule--database_username) * [`description`](#-postgresql--server--pg_ident_rule--description) * [`order`](#-postgresql--server--pg_ident_rule--order) * [`target`](#-postgresql--server--pg_ident_rule--target) ##### `map_name` Data type: `String[1]` Sets the name of the user map that is used to refer to this mapping in pg_hba.conf. ##### `system_username` Data type: `String[1]` Specifies the operating system user name (the user name used to connect to the database). ##### `database_username` Data type: `String[1]` Specifies the user name of the database user. The system_username is mapped to this user name. ##### `description` Data type: `String[1]` Sets a longer description for this rule if required. This description is placed in the comments above the rule in pg_ident.conf. Default value: `'none'` ##### `order` Data type: `String[1]` Defines an order for placing the mapping in pg_ident.conf. Default value: 150. Default value: `'150'` ##### `target` Data type: `Stdlib::Absolutepath` Provides the target for the rule and is generally an internal only property. Use with caution. Default value: `$postgresql::server::pg_ident_conf_path` ### `postgresql::server::reassign_owned_by` Define for reassigning the ownership of objects within a database. * **Note** This enables us to force the a particular ownership for objects within a database #### Parameters The following parameters are available in the `postgresql::server::reassign_owned_by` defined type: * [`old_role`](#-postgresql--server--reassign_owned_by--old_role) * [`new_role`](#-postgresql--server--reassign_owned_by--new_role) * [`db`](#-postgresql--server--reassign_owned_by--db) * [`psql_user`](#-postgresql--server--reassign_owned_by--psql_user) * [`port`](#-postgresql--server--reassign_owned_by--port) * [`connect_settings`](#-postgresql--server--reassign_owned_by--connect_settings) * [`group`](#-postgresql--server--reassign_owned_by--group) * [`psql_path`](#-postgresql--server--reassign_owned_by--psql_path) * [`instance`](#-postgresql--server--reassign_owned_by--instance) ##### `old_role` Data type: `String` Specifies the role or user who is the current owner of the objects in the specified db ##### `new_role` Data type: `String` Specifies the role or user who will be the new owner of these objects ##### `db` Data type: `String` Specifies the database to which the 'REASSIGN OWNED' will be applied ##### `psql_user` Data type: `String` Specifies the OS user for running psql. Default value: `$postgresql::server::user` ##### `port` Data type: `Stdlib::Port` Port to use when connecting. Default value: `$postgresql::server::port` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `group` Data type: `String[1]` Sets the OS group to run psql Default value: `$postgresql::server::group` ##### `psql_path` Data type: `Stdlib::Absolutepath` Sets the path to psql command Default value: `$postgresql::server::psql_path` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server::recovery` This resource manages the parameters that applies to the recovery.conf template. * **Note** Allows you to create the content for recovery.conf. For more details see the usage example and the PostgreSQL documentation. Every parameter value is a string set in the template except recovery_target_inclusive, pause_at_recovery_target, standby_mode and recovery_min_apply_delay. A detailed description of all listed parameters can be found in the PostgreSQL documentation. Only the specified parameters are recognized in the template. The recovery.conf is only created if at least one parameter is set and manage_recovery_conf is set to true. #### Parameters The following parameters are available in the `postgresql::server::recovery` defined type: * [`restore_command`](#-postgresql--server--recovery--restore_command) * [`archive_cleanup_command`](#-postgresql--server--recovery--archive_cleanup_command) * [`recovery_end_command`](#-postgresql--server--recovery--recovery_end_command) * [`recovery_target_name`](#-postgresql--server--recovery--recovery_target_name) * [`recovery_target_time`](#-postgresql--server--recovery--recovery_target_time) * [`recovery_target_xid`](#-postgresql--server--recovery--recovery_target_xid) * [`recovery_target_inclusive`](#-postgresql--server--recovery--recovery_target_inclusive) * [`recovery_target`](#-postgresql--server--recovery--recovery_target) * [`recovery_target_timeline`](#-postgresql--server--recovery--recovery_target_timeline) * [`pause_at_recovery_target`](#-postgresql--server--recovery--pause_at_recovery_target) * [`standby_mode`](#-postgresql--server--recovery--standby_mode) * [`primary_conninfo`](#-postgresql--server--recovery--primary_conninfo) * [`primary_slot_name`](#-postgresql--server--recovery--primary_slot_name) * [`trigger_file`](#-postgresql--server--recovery--trigger_file) * [`recovery_min_apply_delay`](#-postgresql--server--recovery--recovery_min_apply_delay) * [`target`](#-postgresql--server--recovery--target) ##### `restore_command` Data type: `Optional[String]` The shell command to execute to retrieve an archived segment of the WAL file series. Default value: `undef` ##### `archive_cleanup_command` Data type: `Optional[String[1]]` This optional parameter specifies a shell command that will be executed at every restartpoint. Default value: `undef` ##### `recovery_end_command` Data type: `Optional[String[1]]` This parameter specifies a shell command that will be executed once only at the end of recovery. Default value: `undef` ##### `recovery_target_name` Data type: `Optional[String[1]]` This parameter specifies the named restore point (created with pg_create_restore_point()) to which recovery will proceed. Default value: `undef` ##### `recovery_target_time` Data type: `Optional[String[1]]` This parameter specifies the time stamp up to which recovery will proceed. Default value: `undef` ##### `recovery_target_xid` Data type: `Optional[String[1]]` This parameter specifies the transaction ID up to which recovery will proceed. Default value: `undef` ##### `recovery_target_inclusive` Data type: `Optional[Boolean]` Specifies whether to stop just after the specified recovery target (true), or just before the recovery target (false). Default value: `undef` ##### `recovery_target` Data type: `Optional[String[1]]` This parameter specifies that recovery should end as soon as a consistent state is reached, i.e. as early as possible. Default value: `undef` ##### `recovery_target_timeline` Data type: `Optional[String[1]]` Specifies recovering into a particular timeline. Default value: `undef` ##### `pause_at_recovery_target` Data type: `Optional[Boolean]` Specifies whether recovery should pause when the recovery target is reached. Default value: `undef` ##### `standby_mode` Data type: `Optional[String[1]]` Specifies whether to start the PostgreSQL server as a standby. Default value: `undef` ##### `primary_conninfo` Data type: `Optional[String[1]]` Specifies a connection string to be used for the standby server to connect with the primary. Default value: `undef` ##### `primary_slot_name` Data type: `Optional[String[1]]` Optionally specifies an existing replication slot to be used when connecting to the primary via streaming replication to control resource removal on the upstream node. Default value: `undef` ##### `trigger_file` Data type: `Optional[String[1]]` Specifies a trigger file whose presence ends recovery in the standby. Default value: `undef` ##### `recovery_min_apply_delay` Data type: `Optional[Integer]` This parameter allows you to delay recovery by a fixed period of time, measured in milliseconds if no unit is specified. Default value: `undef` ##### `target` Data type: `Stdlib::Absolutepath` Provides the target for the rule, and is generally an internal only property. Use with caution. Default value: `$postgresql::server::recovery_conf_path` ### `postgresql::server::role` Define for creating a database role. #### Parameters The following parameters are available in the `postgresql::server::role` defined type: * [`update_password`](#-postgresql--server--role--update_password) * [`password_hash`](#-postgresql--server--role--password_hash) * [`createdb`](#-postgresql--server--role--createdb) * [`createrole`](#-postgresql--server--role--createrole) * [`db`](#-postgresql--server--role--db) * [`port`](#-postgresql--server--role--port) * [`login`](#-postgresql--server--role--login) * [`inherit`](#-postgresql--server--role--inherit) * [`superuser`](#-postgresql--server--role--superuser) * [`replication`](#-postgresql--server--role--replication) * [`connection_limit`](#-postgresql--server--role--connection_limit) * [`username`](#-postgresql--server--role--username) * [`connect_settings`](#-postgresql--server--role--connect_settings) * [`ensure`](#-postgresql--server--role--ensure) * [`psql_user`](#-postgresql--server--role--psql_user) * [`psql_group`](#-postgresql--server--role--psql_group) * [`psql_path`](#-postgresql--server--role--psql_path) * [`module_workdir`](#-postgresql--server--role--module_workdir) * [`hash`](#-postgresql--server--role--hash) * [`salt`](#-postgresql--server--role--salt) * [`instance`](#-postgresql--server--role--instance) ##### `update_password` Data type: `Boolean` If set to true, updates the password on changes. Set this to false to not modify the role's password after creation. Default value: `true` ##### `password_hash` Data type: `Variant[Boolean, String, Sensitive[String]]` Sets the hash to use during password creation. Default value: `false` ##### `createdb` Data type: `Boolean` Specifies whether to grant the ability to create new databases with this role. Default value: `false` ##### `createrole` Data type: `Boolean` Specifies whether to grant the ability to create new roles with this role. Default value: `false` ##### `db` Data type: `String[1]` Database used to connect to. Default value: `$postgresql::server::default_database` ##### `port` Data type: `Stdlib::Port` Port to use when connecting. Default value: `postgresql::default('port')` ##### `login` Data type: `Boolean` Specifies whether to grant login capability for the new role. Default value: `true` ##### `inherit` Data type: `Boolean` Specifies whether to grant inherit capability for the new role. Default value: `true` ##### `superuser` Data type: `Boolean` Specifies whether to grant super user capability for the new role. Default value: `false` ##### `replication` Data type: `Boolean` Provides provides replication capabilities for this role if set to true. Default value: `false` ##### `connection_limit` Data type: `String[1]` Specifies how many concurrent connections the role can make. Default value: '-1', meaning no limit. Default value: `'-1'` ##### `username` Data type: `String[1]` Defines the username of the role to create. Default value: `$title` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `ensure` Data type: `Enum['present', 'absent']` Specify whether to create or drop the role. Specifying 'present' creates the role. Specifying 'absent' drops the role. Default value: `'present'` ##### `psql_user` Data type: `String[1]` Sets the OS user to run psql Default value: `$postgresql::server::user` ##### `psql_group` Data type: `String[1]` Sets the OS group to run psql Default value: `$postgresql::server::group` ##### `psql_path` Data type: `Stdlib::Absolutepath` Sets path to psql command Default value: `$postgresql::server::psql_path` ##### `module_workdir` Data type: `String[1]` Specifies working directory under which the psql command should be executed. May need to specify if '/tmp' is on volume mounted with noexec option. Default value: `$postgresql::server::module_workdir` ##### `hash` Data type: `Optional[Enum['md5', 'scram-sha-256']]` Specify the hash method for pg password Default value: `undef` ##### `salt` Data type: `Optional[Variant[String[1], Integer]]` Specify the salt use for the scram-sha-256 encoding password (default username) Default value: `undef` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server::schema` Create a new schema. * **Note** The database must exist and the PostgreSQL user should have enough privileges #### Examples ##### ```puppet postgresql::server::schema {'private': db => 'template1', } ``` #### Parameters The following parameters are available in the `postgresql::server::schema` defined type: * [`db`](#-postgresql--server--schema--db) * [`owner`](#-postgresql--server--schema--owner) * [`schema`](#-postgresql--server--schema--schema) * [`connect_settings`](#-postgresql--server--schema--connect_settings) * [`port`](#-postgresql--server--schema--port) * [`user`](#-postgresql--server--schema--user) * [`group`](#-postgresql--server--schema--group) * [`psql_path`](#-postgresql--server--schema--psql_path) * [`module_workdir`](#-postgresql--server--schema--module_workdir) * [`instance`](#-postgresql--server--schema--instance) ##### `db` Data type: `String[1]` Required. Sets the name of the database in which to create this schema. Default value: `$postgresql::server::default_database` ##### `owner` Data type: `Optional[String[1]]` Sets the default owner of the schema. Default value: `undef` ##### `schema` Data type: `String[1]` Sets the name of the schema. Default value: `$title` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `port` Data type: `Stdlib::Port` the post the postgresql instance is listening on. Default value: `$postgresql::server::port` ##### `user` Data type: `String[1]` Sets the OS user to run psql Default value: `$postgresql::server::user` ##### `group` Data type: `String[1]` Sets the OS group to run psql Default value: `$postgresql::server::group` ##### `psql_path` Data type: `Stdlib::Absolutepath` Sets path to psql command Default value: `$postgresql::server::psql_path` ##### `module_workdir` Data type: `Stdlib::Absolutepath` Specifies working directory under which the psql command should be executed. May need to specify if '/tmp' is on volume mounted with noexec option. Default value: `$postgresql::server::module_workdir` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server::table_grant` This resource wraps the grant resource to manage table grants specifically. #### Parameters The following parameters are available in the `postgresql::server::table_grant` defined type: * [`privilege`](#-postgresql--server--table_grant--privilege) * [`table`](#-postgresql--server--table_grant--table) * [`db`](#-postgresql--server--table_grant--db) * [`role`](#-postgresql--server--table_grant--role) * [`ensure`](#-postgresql--server--table_grant--ensure) * [`port`](#-postgresql--server--table_grant--port) * [`psql_db`](#-postgresql--server--table_grant--psql_db) * [`psql_user`](#-postgresql--server--table_grant--psql_user) * [`connect_settings`](#-postgresql--server--table_grant--connect_settings) * [`onlyif_exists`](#-postgresql--server--table_grant--onlyif_exists) * [`instance`](#-postgresql--server--table_grant--instance) ##### `privilege` Data type: ```puppet Enum['ALL', 'SELECT', 'INSERT', 'UPDATE', 'DELETE', 'TRUNCATE', 'REFERENCES', 'TRIGGER', 'all', 'select', 'insert', 'update', 'delete', 'truncate', 'references', 'trigger'] ``` Specifies comma-separated list of privileges to grant. Valid options: 'ALL', 'SELECT', 'INSERT', 'UPDATE', 'DELETE', 'TRUNCATE', 'REFERENCES', 'TRIGGER'. ##### `table` Data type: `String[1]` Specifies the table to which you are granting access. ##### `db` Data type: `String[1]` Specifies which database the table is in. ##### `role` Data type: `String[1]` Specifies the role or user to whom you are granting access. ##### `ensure` Data type: `Optional[Enum['present', 'absent']]` Specifies whether to grant or revoke the privilege. Default is to grant the privilege. Default value: `undef` ##### `port` Data type: `Optional[Stdlib::Port]` Port to use when connecting. Default value: `undef` ##### `psql_db` Data type: `Optional[String[1]]` Specifies the database to execute the grant against. This should not ordinarily be changed from the default. Default value: `undef` ##### `psql_user` Data type: `Optional[String[1]]` Specifies the OS user for running psql. Default value: `undef` ##### `connect_settings` Data type: `Optional[Hash]` Specifies a hash of environment variables used when connecting to a remote server. Default value: `undef` ##### `onlyif_exists` Data type: `Boolean` Create grant only if it doesn't exist. Default value: `false` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server::tablespace` This module creates tablespace. #### Parameters The following parameters are available in the `postgresql::server::tablespace` defined type: * [`location`](#-postgresql--server--tablespace--location) * [`manage_location`](#-postgresql--server--tablespace--manage_location) * [`owner`](#-postgresql--server--tablespace--owner) * [`spcname`](#-postgresql--server--tablespace--spcname) * [`connect_settings`](#-postgresql--server--tablespace--connect_settings) * [`port`](#-postgresql--server--tablespace--port) * [`user`](#-postgresql--server--tablespace--user) * [`group`](#-postgresql--server--tablespace--group) * [`psql_path`](#-postgresql--server--tablespace--psql_path) * [`module_workdir`](#-postgresql--server--tablespace--module_workdir) * [`instance`](#-postgresql--server--tablespace--instance) ##### `location` Data type: `String[1]` Specifies the path to locate this tablespace. ##### `manage_location` Data type: `Boolean` Set to false if you have file{ $location: } already defined Default value: `true` ##### `owner` Data type: `Optional[String[1]]` Specifies the default owner of the tablespace. Default value: `undef` ##### `spcname` Data type: `String[1]` Specifies the name of the tablespace. Default value: `$title` ##### `connect_settings` Data type: `Hash` Specifies a hash of environment variables used when connecting to a remote server. Default value: `$postgresql::server::default_connect_settings` ##### `port` Data type: `Stdlib::Port` the port of the postgresql instance that sould be used. Default value: `$postgresql::server::port` ##### `user` Data type: `String[1]` Sets the OS user to run psql Default value: `$postgresql::server::user` ##### `group` Data type: `String[1]` Sets the OS group to run psql Default value: `$postgresql::server::group` ##### `psql_path` Data type: `Stdlib::Absolutepath` Sets path to psql command Default value: `$postgresql::server::psql_path` ##### `module_workdir` Data type: `String[1]` Specifies working directory under which the psql command should be executed. May need to specify if '/tmp' is on volume mounted with noexec option. Default value: `$postgresql::server::module_workdir` ##### `instance` Data type: `String[1]` The name of the Postgresql database instance. Default value: `'main'` ### `postgresql::server_instance` define to install and manage additional postgresql instances #### Parameters The following parameters are available in the `postgresql::server_instance` defined type: * [`instance_name`](#-postgresql--server_instance--instance_name) * [`instance_user`](#-postgresql--server_instance--instance_user) * [`instance_group`](#-postgresql--server_instance--instance_group) * [`instance_user_homedirectory`](#-postgresql--server_instance--instance_user_homedirectory) * [`manage_instance_user_and_group`](#-postgresql--server_instance--manage_instance_user_and_group) * [`instance_directories`](#-postgresql--server_instance--instance_directories) * [`initdb_settings`](#-postgresql--server_instance--initdb_settings) * [`config_settings`](#-postgresql--server_instance--config_settings) * [`service_settings`](#-postgresql--server_instance--service_settings) * [`passwd_settings`](#-postgresql--server_instance--passwd_settings) * [`roles`](#-postgresql--server_instance--roles) * [`config_entries`](#-postgresql--server_instance--config_entries) * [`pg_hba_rules`](#-postgresql--server_instance--pg_hba_rules) * [`databases`](#-postgresql--server_instance--databases) * [`databases_and_users`](#-postgresql--server_instance--databases_and_users) * [`database_grants`](#-postgresql--server_instance--database_grants) * [`table_grants`](#-postgresql--server_instance--table_grants) ##### `instance_name` Data type: `String[1]` The name of the instance. Default value: `$name` ##### `instance_user` Data type: `String[1]` The user to run the instance as. Default value: `$instance_name` ##### `instance_group` Data type: `String[1]` The group to run the instance as. Default value: `$instance_name` ##### `instance_user_homedirectory` Data type: `Stdlib::Absolutepath` The home directory of the instance user. Default value: `"/opt/pgsql/data/home/${instance_user}"` ##### `manage_instance_user_and_group` Data type: `Boolean` Should Puppet manage the instance user and it's primary group?. Default value: `true` ##### `instance_directories` Data type: `Hash` directories needed for the instance. Option to manage the directory properties for each directory. Default value: `{}` ##### `initdb_settings` Data type: `Hash` Specifies a hash witn parameters for postgresql::server::instance::initdb Default value: `{}` ##### `config_settings` Data type: `Hash` Specifies a hash with parameters for postgresql::server::instance::config Default value: `{}` ##### `service_settings` Data type: `Hash` Specifies a hash with parameters for postgresql::server:::instance::service Default value: `{}` ##### `passwd_settings` Data type: `Hash` Specifies a hash with parameters for postgresql::server::instance::passwd Default value: `{}` ##### `roles` Data type: `Hash` Specifies a hash from which to generate postgresql::server::role resources. Default value: `{}` ##### `config_entries` Data type: `Hash` Specifies a hash from which to generate postgresql::server::config_entry resources. Default value: `{}` ##### `pg_hba_rules` Data type: `Hash` Specifies a hash from which to generate postgresql::server::pg_hba_rule resources. Default value: `{}` ##### `databases` Data type: `Hash` Specifies a hash from which to generate postgresql::server::database resources. Default value: `{}` ##### `databases_and_users` Data type: `Hash` Specifies a hash from which to generate postgresql::server::db resources. Default value: `{}` ##### `database_grants` Data type: `Hash` Specifies a hash from which to generate postgresql::server::database_grant resources. Default value: `{}` ##### `table_grants` Data type: `Hash` Specifies a hash from which to generate postgresql::server::table_grant resources. Default value: `{}` ## Resource types ### `postgresql_conf` This type allows puppet to manage postgresql.conf parameters. #### Properties The following properties are available in the `postgresql_conf` type. ##### `comment` Valid values: `%r{^[\w\W]+$}` The comment to set for this parameter. ##### `ensure` Valid values: `present`, `absent` The basic property that the resource should be in. Default value: `present` ##### `value` Valid values: `%r{^(\S.*)?$}` The value to set for this parameter. #### Parameters The following parameters are available in the `postgresql_conf` type. * [`key`](#-postgresql_conf--key) * [`name`](#-postgresql_conf--name) * [`provider`](#-postgresql_conf--provider) * [`target`](#-postgresql_conf--target) ##### `key` Valid values: `%r{^[\w.]+$}` The Postgresql parameter to manage. ##### `name` Valid values: `%r{^[\w.]+$}` namevar A unique title for the resource. ##### `provider` The specific backend to use for this `postgresql_conf` resource. You will seldom need to specify this --- Puppet will usually discover the appropriate provider for your platform. ##### `target` Valid values: `%r{^/\S+[a-z0-9(/)-]*\w+.conf$}` The path to the postgresql config file ### `postgresql_conn_validator` Verify that a connection can be successfully established between a node and the PostgreSQL server. Its primary use is as a precondition to prevent configuration changes from being applied if the PostgreSQL server cannot be reached, but it could potentially be used for other purposes such as monitoring. #### Properties The following properties are available in the `postgresql_conn_validator` type. ##### `ensure` Valid values: `present`, `absent` Ensure connection validation Default value: `present` #### Parameters The following parameters are available in the `postgresql_conn_validator` type. * [`command`](#-postgresql_conn_validator--command) * [`connect_settings`](#-postgresql_conn_validator--connect_settings) * [`db_name`](#-postgresql_conn_validator--db_name) * [`db_password`](#-postgresql_conn_validator--db_password) * [`db_username`](#-postgresql_conn_validator--db_username) * [`host`](#-postgresql_conn_validator--host) * [`name`](#-postgresql_conn_validator--name) * [`port`](#-postgresql_conn_validator--port) * [`provider`](#-postgresql_conn_validator--provider) * [`psql_path`](#-postgresql_conn_validator--psql_path) * [`run_as`](#-postgresql_conn_validator--run_as) * [`sleep`](#-postgresql_conn_validator--sleep) * [`tries`](#-postgresql_conn_validator--tries) ##### `command` Command to run against target database. Default value: `SELECT 1` ##### `connect_settings` Hash of environment variables for connection to a db. ##### `db_name` The name of the database you are trying to validate a connection with. ##### `db_password` The password required to access the target PostgreSQL database. ##### `db_username` A user that has access to the target PostgreSQL database. ##### `host` The DNS name or IP address of the server where PostgreSQL should be running. ##### `name` namevar An arbitrary name used as the identity of the resource. ##### `port` The port that the PostgreSQL server should be listening on. ##### `provider` The specific backend to use for this `postgresql_conn_validator` resource. You will seldom need to specify this --- Puppet will usually discover the appropriate provider for your platform. ##### `psql_path` Path to the psql command. ##### `run_as` System user that will run the psql command. ##### `sleep` The length of sleep time between connection tries. Default value: `2` ##### `tries` The number of tries to validate the connection to the target PostgreSQL database. Default value: `10` ### `postgresql_psql` An arbitrary tag for your own reference; the name of the message. #### Properties The following properties are available in the `postgresql_psql` type. ##### `command` The SQL command to execute via psql. #### Parameters The following parameters are available in the `postgresql_psql` type. * [`connect_settings`](#-postgresql_psql--connect_settings) * [`cwd`](#-postgresql_psql--cwd) * [`db`](#-postgresql_psql--db) * [`environment`](#-postgresql_psql--environment) * [`instance`](#-postgresql_psql--instance) * [`name`](#-postgresql_psql--name) * [`onlyif`](#-postgresql_psql--onlyif) * [`port`](#-postgresql_psql--port) * [`provider`](#-postgresql_psql--provider) * [`psql_group`](#-postgresql_psql--psql_group) * [`psql_path`](#-postgresql_psql--psql_path) * [`psql_user`](#-postgresql_psql--psql_user) * [`refreshonly`](#-postgresql_psql--refreshonly) * [`search_path`](#-postgresql_psql--search_path) * [`sensitive`](#-postgresql_psql--sensitive) * [`unless`](#-postgresql_psql--unless) ##### `connect_settings` Connection settings that will be used when connecting to postgres ##### `cwd` The working directory under which the psql command should be executed. Default value: `/tmp` ##### `db` The name of the database to execute the SQL command against, this overrides any PGDATABASE value in connect_settings ##### `environment` Any additional environment variables you want to set for a SQL command. Multiple environment variables should be specified as an array. ##### `instance` The postgresql instance under which the psql command should be executed. Default value: `main` ##### `name` namevar An arbitrary tag for your own reference; the name of the message. ##### `onlyif` An optional SQL command to execute prior to the main :command; this is generally intended to be used for idempotency, to check for the existence of an object in the database to determine whether or not the main SQL command needs to be executed at all. ##### `port` The port of the database server to execute the SQL command against, this overrides any PGPORT value in connect_settings. ##### `provider` The specific backend to use for this `postgresql_psql` resource. You will seldom need to specify this --- Puppet will usually discover the appropriate provider for your platform. ##### `psql_group` The system user group account under which the psql command should be executed. Default value: `postgres` ##### `psql_path` The path to psql executable. Default value: `psql` ##### `psql_user` The system user account under which the psql command should be executed. Default value: `postgres` ##### `refreshonly` Valid values: `true`, `false` If 'true', then the SQL will only be executed via a notify/subscribe event. Default value: `false` ##### `search_path` The schema search path to use when executing the SQL command ##### `sensitive` Valid values: `true`, `false` If 'true', then the executed command will not be echoed into the log. Use this to protect sensitive information passing through. Default value: `false` ##### `unless` An optional SQL command to execute prior to the main :command; this is generally intended to be used for idempotency, to check for the existence of an object in the database to determine whether or not the main SQL command needs to be executed at all.' ### `postgresql_replication_slot` This type allows to create and destroy replication slots to register warm standby replication on a Postgresql primary server. #### Properties The following properties are available in the `postgresql_replication_slot` type. ##### `ensure` Valid values: `present`, `absent` The basic property that the resource should be in. Default value: `present` #### Parameters The following parameters are available in the `postgresql_replication_slot` type. * [`name`](#-postgresql_replication_slot--name) * [`provider`](#-postgresql_replication_slot--provider) ##### `name` Valid values: `%r{^[a-z0-9_]+$}` namevar The name of the slot to create. Must be a valid replication slot name. ##### `provider` The specific backend to use for this `postgresql_replication_slot` resource. You will seldom need to specify this --- Puppet will usually discover the appropriate provider for your platform. ## Functions ### `postgresql::default` Type: Puppet Language This function pull default values from the `params` class or `globals` class if the value is not present in `params`. #### Examples ##### ```puppet postgresql::default('variable') ``` #### `postgresql::default(String $parameter_name)` The postgresql::default function. Returns: `Any` ##### Examples ###### ```puppet postgresql::default('variable') ``` ##### `parameter_name` Data type: `String` ### `postgresql::postgresql_escape` Type: Ruby 4.x API This function escapes a string using [Dollar Quoting](https://www.postgresql.org/docs/12/sql-syntax-lexical.html#SQL-SYNTAX-DOLLAR-QUOTING) using a randomly generated tag if required. #### `postgresql::postgresql_escape(String[1] $input_string)` The postgresql::postgresql_escape function. Returns: `String` A `Dollar Quoted` string ##### `input_string` Data type: `String[1]` The unescaped string you want to escape using `dollar quoting` ### `postgresql::postgresql_password` Type: Ruby 4.x API This function returns the postgresql password hash from the clear text username / password #### `postgresql::postgresql_password(Variant[String[1], Integer] $username, Variant[String[1], Sensitive[String[1]], Integer] $password, Optional[Boolean] $sensitive, Optional[Optional[Postgresql::Pg_password_encryption]] $hash, Optional[Optional[Variant[String[1], Integer]]] $salt)` The postgresql::postgresql_password function. Returns: `Variant[String, Sensitive[String]]` The postgresql password hash from the clear text username / password. ##### `username` Data type: `Variant[String[1], Integer]` The clear text `username` ##### `password` Data type: `Variant[String[1], Sensitive[String[1]], Integer]` The clear text `password` ##### `sensitive` Data type: `Optional[Boolean]` If the Postgresql-Passwordhash should be of Datatype Sensitive[String] ##### `hash` Data type: `Optional[Optional[Postgresql::Pg_password_encryption]]` Set type for password hash Default value comes from `postgresql::params::password_encryption` and changes based on the `postgresql::globals::version`. ##### `salt` Data type: `Optional[Optional[Variant[String[1], Integer]]]` Use a specific salt value for scram-sha-256, default is username ### `postgresql::prepend_sql_password` Type: Ruby 4.x API This function exists for usage of a role password that is a deferred function #### `postgresql::prepend_sql_password(String $password)` The postgresql::prepend_sql_password function. Returns: `String` ##### `password` Data type: `String` The clear text `password` ### `postgresql_escape` Type: Ruby 4.x API DEPRECATED. Use the namespaced function [`postgresql::postgresql_escape`](#postgresqlpostgresql_escape) instead. #### `postgresql_escape(Any *$args)` The postgresql_escape function. Returns: `Any` ##### `*args` Data type: `Any` ### `postgresql_password` Type: Ruby 4.x API DEPRECATED. Use the namespaced function [`postgresql::postgresql_password`](#postgresqlpostgresql_password) instead. #### `postgresql_password(Any *$args)` The postgresql_password function. Returns: `Any` ##### `*args` Data type: `Any` ## Data types ### `Postgresql::Pg_hba_rule` type for all parameters in the postgresql::server::hba_rule defined resource * **See also** * https://github.com/puppetlabs/puppetlabs-postgresql/blob/main/manifests/server/pg_hba_rule.pp Alias of ```puppet Struct[{ Optional[description] => String, type => Postgresql::Pg_hba_rule_type, database => String, user => String, Optional[address] => Optional[Postgresql::Pg_hba_rule_address], auth_method => String, Optional[auth_option] => Optional[String], Optional[order] => Variant[String,Integer], Optional[target] => Stdlib::Absolutepath, Optional[postgresql_version] => String, }] ``` ### `Postgresql::Pg_hba_rule_address` Supported address types * **See also** * https://www.postgresql.org/docs/current/auth-pg-hba-conf.html Alias of `Variant[Stdlib::IP::Address::V4::CIDR, Stdlib::IP::Address::V6::CIDR, Stdlib::Fqdn, Enum['all', 'samehost', 'samenet'], Pattern[/^\.(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z0-9][a-zA-Z0-9-]{0,61}[a-zA-Z0-9]$/]]` ### `Postgresql::Pg_hba_rule_type` enum for all different types for the pg_hba_conf * **See also** * https://www.postgresql.org/docs/current/auth-pg-hba-conf.html Alias of `Enum['local', 'host', 'hostssl', 'hostnossl', 'hostgssenc', 'hostnogssenc']` ### `Postgresql::Pg_hba_rules` validates a hash of entries for postgresql::server::pg_hab_conf * **See also** * https://github.com/puppetlabs/puppetlabs-postgresql/blob/main/manifests/server/pg_hba_rule.pp Alias of `Hash[String[1], Postgresql::Pg_hba_rule]` ### `Postgresql::Pg_password_encryption` the supported password_encryption Alias of `Enum['md5', 'scram-sha-256']` ## Tasks ### `sql` Allows you to execute arbitary SQL **Supports noop?** false #### Parameters ##### `database` Data type: `Optional[String[1]]` Database to connect to ##### `host` Data type: `Optional[String[1]]` Hostname to connect to ##### `password` Data type: `Optional[String[1]]` The password ##### `port` Data type: `Optional[String[1]]` The port ##### `sql` Data type: `String[1]` The SQL you want to execute ##### `user` Data type: `Optional[String[1]]` The user