fix: nixos tests for pg_repack, pgroonga, and plpgsql_check to use the supabase_admin user

We switched to using the supabase_admin user for our Postgres tests instead of the default postgres user. 
This change updates the authentication methods and user management in the NixOS test configurations for the pg_repack, pgroonga, and plpgsql_check extensions.

Author: jfroche

nix/ext/tests/pg_repack.nix

@@ -59,12 +59,20 @@ self.inputs.nixpkgs.lib.nixos.runTest {
         enable = true;
         package = postgresqlWithExtension self.packages.${pkgs.system}.postgresql_15;
         enableTCPIP = true;
-        initialScript = pkgs.writeText "init-postgres-with-password" ''
-          CREATE USER test WITH PASSWORD 'secret';
-        '';
         authentication = ''
-          host test postgres samenet scram-sha-256
+          local all postgres peer map=postgres
+          local all all peer map=root
+        '';
+        identMap = ''
+          root root supabase_admin
+          postgres postgres postgres
         '';
+        ensureUsers = [
+          {
+            name = "supabase_admin";
+            ensureClauses.superuser = true;
+          }
+        ];
       };
 
       networking.firewall.allowedTCPPorts = [ config.services.postgresql.settings.port ];

nix/ext/tests/pgroonga.nix

@@ -60,6 +60,21 @@ self.inputs.nixpkgs.lib.nixos.runTest {
       services.postgresql = {
         enable = true;
         package = psql_15;
+        enableTCPIP = true;
+        authentication = ''
+          local all postgres peer map=postgres
+          local all all peer map=root
+        '';
+        identMap = ''
+          root root supabase_admin
+          postgres postgres postgres
+        '';
+        ensureUsers = [
+          {
+            name = "supabase_admin";
+            ensureClauses.superuser = true;
+          }
+        ];
       };
       systemd.services.postgresql.environment.MECAB_DICDIR = "${
         self.packages.${pkgs.system}.mecab-naist-jdic
@@ -120,7 +135,6 @@ self.inputs.nixpkgs.lib.nixos.runTest {
         "17": [${lib.concatStringsSep ", " (map (s: ''"${s}"'') (versions "17"))}],
       }
       extension_name = "${pname}"
-      support_upgrade = False
       pg17_configuration = "${pg17-configuration}"
       ext_has_background_worker = ${
         if (installedExtension "15") ? hasBackgroundWorker then "True" else "False"
@@ -135,7 +149,7 @@ self.inputs.nixpkgs.lib.nixos.runTest {
       server.wait_for_unit("multi-user.target")
       server.wait_for_unit("postgresql.service")
 
-      test = PostgresExtensionTest(server, extension_name, versions, sql_test_directory, support_upgrade)
+      test = PostgresExtensionTest(server, extension_name, versions, sql_test_directory)
 
       with subtest("Check upgrade path with postgresql 15"):
         test.check_upgrade_path("15")

nix/ext/tests/plpgsql_check.nix

@@ -61,12 +61,20 @@ self.inputs.nixpkgs.lib.nixos.runTest {
         enable = true;
         package = psql_15;
         enableTCPIP = true;
-        initialScript = pkgs.writeText "init-postgres-with-password" ''
-          CREATE USER test WITH PASSWORD 'secret';
-        '';
         authentication = ''
-          host test postgres samenet scram-sha-256
+          local all postgres peer map=postgres
+          local all all peer map=root
+        '';
+        identMap = ''
+          root root supabase_admin
+          postgres postgres postgres
         '';
+        ensureUsers = [
+          {
+            name = "supabase_admin";
+            ensureClauses.superuser = true;
+          }
+        ];
         settings = (installedExtension "15").defaultSettings or { };
       };