# `edge-backend`

## New Secrets in secret manager
edge-backend-jwt-secret
edge-backend-launch-darkly-sdk-key
edge-sql-password

## cron manual steps

In order to apply the principle of the least privilege, we can `manually` give the service account the needed permission to the `cron` schema as follows:

NOTE: You must omit the `-i` flag when running `cloud-sql-proxy`, in order to successfully `GRANT` these permissions as the `postgres` user.  

```sql
CREATE EXTENSION IF NOT EXISTS pg_cron;
GRANT ALL ON SCHEMA cron TO "bff-sa@${project_id}.iam"; 
GRANT ALL ON ALL TABLES IN SCHEMA cron TO "bff-sa@${project_id}.iam";
```