Allow global postgres config to leverage peer ident mapping

[OrangeDog]

Arising from #51260 (comment)

If it were possible to globally configure host=None, runas=None and user=postgres (or have the user continue to be auto-detected) then it should be possible for users to configure much more efficient running of postgres states.

pg_hba.conf

# TYPE  DATABASE        USER            ADDRESS                 METHOD
local   all             postgres                                peer map=local

pg_ident.conf

# MAPNAME       SYSTEM-USERNAME         PG-USERNAME
local           postgres                postgres
local           root                    postgres
local           salt                    postgres  # if salt doesn't run as root

[Ch3LL]

ping @saltstack/team-core any opinions here?

[waynew]

I'm not sure if I understand - are you saying that this is something we would/should do in addition to what's being discussed in 51260, or regardless of 51260?

[OrangeDog]

Both would independently give benefits.

That one is about the general problem of it being expensive to do things as another user.

This one is about a specific problem of not being able to (as far as I can see) configure the postgres module so you don’t need to run things as another user in the first place.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

If this issue is closed prematurely, please leave a comment and we will gladly reopen the issue.

[OrangeDog]

This is still a desired feature

[stale]

Thank you for updating this issue. It is no longer marked as stale.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

If this issue is closed prematurely, please leave a comment and we will gladly reopen the issue.

[OrangeDog]

unstale

[stale]

Thank you for updating this issue. It is no longer marked as stale.