mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-08-19 16:02:14 +00:00
Ruben Fiszel
57ad009f9f
On managed Postgres (Scaleway, RDS, Azure, ...) the connecting user is not a superuser and cannot create a role WITH BYPASSRLS. The early migrations create windmill_admin WITH BYPASSRLS inside DO/EXCEPTION blocks that swallow the resulting "permission denied to create role" error, so the role is never created. The first bare `GRANT ... TO windmill_admin` migration (20221211192539) then hard-fails with `role "windmill_admin" does not exist`, aborting all initial migrations. Bootstrap windmill_user and windmill_admin before migrations run, falling back to a plain windmill_admin (no BYPASSRLS) when BYPASSRLS is not permitted. Admin access remains correct in that case via the explicit admin_policy (USING true) entries already created for every RLS table. Fixes WIN-2042 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise