Cannot remove pgaudit from default installations

[Leo791]

In one of our use cases we wish not to have the pgaudit extension enabled. So far, looking at the code base I have not found a way to do this.

pgaudit seems to be a mandatory property that cannot be removed for the install. However, dropping it afterwards does not seem to impact functionality of the instance.

Is there a way to remove pgaudit from the mandatory parameters? Or is there a reason it is being handled as a mandatory parameter?

[tjmoore4]

Hi @Leo791. You are correct that, by default, pgAudit is installed during cluster creation. The reasoning behind this is that, for those who would like to use pgAudit, it is easier to configure later without requiring any cluster downtime since it is already installed. The default configuration should not perform any logging and should incur almost no overhead, so we felt this was a reasonable default.

Given the above, could you provide more details for your use case and why you would prefer to not have pgAudit enabled?

[Leo791]

@tjmoore4 thank you for your answer, I'll try to explain the use case.

Our use case is a very basic service plan which doesn't allow for updates and should spend the minimum possible resources. So having pgaudit uninstalled would be a gain in overhead. However, as you say, minimal. Again, as you say, if we ever decide to allow updates to this service plan having pgaudit already there could be beneficial.

Currently we are disabling pgaudit post provisioning of the custom resource and this works for us. So this is a non-issue on our side. I opened this thread to better understand the reasoning behind this decision, which you have now provided.

[tjmoore4]

@Leo791 thank you for that information. I'm glad to hear it's not causing any issues on your side. If you have any other questions regarding pgAudit, please let me know. Otherwise, I will plan to close out this thread.