That's pretty easy to do. I already wrote a function for refreshing the IAM token, so I'd just need

That's pretty easy to do. I already wrote a function for refreshing the IAM token, so I'd just need to use one of these endpoints to update it every 24 hours (to be safe to avoid long lasting connections from expiring).

https://developers.cloudflare.com/api/resources/hyperdrive/subresources/configs/methods/edit/

https://developers.cloudflare.com/api/resources/hyperdrive/subresources/configs/methods/update/

What's the difference between edit and update?

Cloudflare API | Hyperdrive › Configs › Patch Hyperdrive

Interact with Cloudflare's products and services via the Cloudflare API

Cloudflare API | Hyperdrive › Configs › Update Hyperdrive

Interact with Cloudflare's products and services via the Cloudflare API

Ddave That's pretty easy to do. I already wrote a function for refreshing the IAM toke...

AJR•1/30/25, 5:51 PM

PATCH vs PUT. PATCH will only update the things that were changed. PUT will update/overwrite the whole config, and trigger revalidation.

More practically, it's because PATCH in terraform is a pain so we felt it would be most efficient to just have both.

AAJR PATCH vs PUT. PATCH will only update the things that were changed. PUT will upd...

daveOP•1/30/25, 5:52 PM

ah, so I'd want to use PATCH here?

AJR•1/30/25, 5:54 PM

IIRC refreshing the token gives you a new DSQL connection string, so there's not much difference between them in this scenario. New conn string will trigger revalidation anyways, since that's the stuff that affects whether hyperdrive can still connect.

AJR•1/30/25, 5:54 PM

The dash uses PATCH, can't change anything there that would change our ability to connect so it can skip the revalidation traffic.

AAJR IIRC refreshing the token gives you a new DSQL connection string, so there's not...

daveOP•1/30/25, 5:55 PM

I only need to update the the password. Everything else stays the same.

AJR•1/30/25, 5:55 PM

Ah, neat. I misunderstood what DSQL was doing there.

Same answer though. Typos when entering a password is like half the reason that we do the config-time validation in the first place.

AAJR IIRC refreshing the token gives you a new DSQL connection string, so there's not...

daveOP•1/30/25, 5:56 PM

To confirm, does changing the password with either PATCH or PUT cause a trigger revalidation?

AJR•1/30/25, 5:58 PM

Yes it does.

daveOP•1/30/25, 5:59 PM

cool, I'll do a blog post on it.

AJR•1/30/25, 5:59 PM

Nice! Share it here and we'll repost it around, if you like.

daveOP•1/30/25, 6:00 PM

ya I'm doing it for the SEO, so please do share and ideally link.

AJR•1/30/25, 6:00 PM

Don't hate the player, hate the game.

daveOP•1/30/25, 6:48 PM

@AJR Is there a way I can create a Hyperdrive without needing a valid password?

AJR•1/30/25, 6:49 PM

No, there is not.

daveOP•1/30/25, 6:55 PM

btw, so happy that the permissions required now shows up in the API docs!!

daveOP•1/30/25, 6:55 PM

I think this is new?

AJR•1/30/25, 6:56 PM

There was a big docs revamp recently, if I recall. All generated from our internal schemas. Very slick, and much less toil on our end. I really appreciate that team shouldering the project.

daveOP•1/30/25, 7:00 PM

I was going to hassle you to ask you about what permissions were neated, but nope, not needed!

daveOP•1/30/25, 8:05 PM

@AJR Sanity check, what does

Inactive

Inactive

mean?

Ddave @AJR Sanity check, what does `Inactive` mean?

AJR•1/30/25, 8:06 PM

No queries in the last.... 24 hours? Hang on let me check. No recent traffic, in any case.

AAJR No queries in the last.... 24 hours? Hang on let me check. No recent traffic, ...

AJR•1/30/25, 8:08 PM

Ah, yeah. Last 24 hours.

daveOP•1/30/25, 8:53 PM

A Hyperdrive config with the given name already exists

A Hyperdrive config with the given name already exists

daveOP•1/30/25, 8:53 PM

am I not allowed to reuse names?

AAJR Nice! Share it here and we'll repost it around, if you like.

daveOP•1/30/25, 9:58 PM

https://www.ai.moda/en/blog/automate-hyperdrive-iam-auth-with-workers

ai.moda

Automate Hyperdrive IAM Authentication with Workers

Learn how to automatically manage rotating credentials and AWS IAM tokens for PostgreSQL databases using Cloudflare Workers and Hyperdrive.

Ddave am I not allowed to reuse names?

AJR•1/30/25, 10:09 PM

Correct! We enforce unique names. We don't use it for any actual logic in Hyperdrive itself, but it makes life way simpler for things like wrangler or the dash

AAJR Correct! We enforce unique names. We don't use it for any actual logic in Hype...

daveOP•1/30/25, 10:10 PM

even after deleting?

AJR•1/30/25, 10:10 PM

No, should be fine after deleting...

AJR•1/30/25, 10:12 PM

Hmmmm. I see what happened here. I'll file a bug. Thanks for the catch

Ddave https://www.ai.moda/en/blog/automate-hyperdrive-iam-auth-with-workers

AJR•1/30/25, 10:20 PM

Nice, very well written. Let me crosspost that a bit.

James•1/31/25, 12:27 AM

We're seeing a spike of errors causing

postgres

postgres

to internally explode: https://i.james.pub/file/2025/01/d4f49e0e-2876-40a2-98e3-a84eaa719bdc.png. DB ID

edbe490e790c44389774f0c88667e221

edbe490e790c44389774f0c88667e221

. Anyone else?

JJames We're seeing a spike of errors causing `postgres` to internally explode: https:/...

daveOP•1/31/25, 12:33 AM

In what timeframe?

James•1/31/25, 12:34 AM

starting around 25 minutes ago, at 00:07 UTC. It's looking like our DB at Neon might be the cause here though and not Hyperdrive

JJames starting around 25 minutes ago, at 00:07 UTC. It's looking like our DB at Neon m...

daveOP•1/31/25, 12:34 AM

ah yeah, that's Neon for you.

JJames starting around 25 minutes ago, at 00:07 UTC. It's looking like our DB at Neon m...

daveOP•1/31/25, 12:34 AM

I would recommend looking at AWS RDS Aurora Serverless v2. It's really nice IMO.

daveOP•1/31/25, 12:35 AM

we did have PostgreSQL errors around this time, but I don't know if it was the database or Hyperdrive causing the errors.

AJR•1/31/25, 12:36 AM

Let me take a look

AJR•1/31/25, 12:44 AM

@James what's your Hyperdrive ID?

AAJR Let me take a look

AJR•1/31/25, 12:45 AM

Not seeing anything widespread in our logging or metrics

James•1/31/25, 12:45 AM

edbe490e790c44389774f0c88667e221

edbe490e790c44389774f0c88667e221

but after disabling Hyperdrive it looks like we're just timing out to Neon us-east-2

James•1/31/25, 12:45 AM

So not a Hyperdrive issue thankfully, but thank you

AJR•1/31/25, 12:46 AM

Sucks, hope you get it sorted.

JJames `edbe490e790c44389774f0c88667e221` - but after disabling Hyperdrive it looks lik...

Isaac McFadyen•1/31/25, 12:48 AM

I checked Neon's status page and there's nothing, annoying that there's random errors :\

Ddave I would recommend looking at AWS RDS Aurora Serverless v2. It's really nice IMO.

Max (@rozenmd)•1/31/25, 6:28 AM

just basic RDS Postgres has been brilliant for my side project, 4 years without downtime

MMax (@rozenmd)just basic RDS Postgres has been brilliant for my side project, 4 years without ...

daveOP•1/31/25, 12:40 PM

Look at switching to Aurora Serverless v2; it now supports scaling to zero, which is great for side projects that don't need to be on all the time. (Takes <30 seconds to turn back on.)

https://aws.amazon.com/blogs/database/introducing-scaling-to-0-capacity-with-amazon-aurora-serverless-v2/

And it also has zero-downtime patching (ZDP)!

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.PostgreSQL.MinorUpgrade.html#USER_UpgradeDBInstance.PostgreSQL.Minor.zdp

Ddave Look at switching to Aurora Serverless v2; it now supports scaling to zero, whic...

Hard@Work•1/31/25, 7:50 PM

I don't know if I'm looking in the right place, but $132.54 a month for a Side Project seems very expensive...

HHard@Work I don't know if I'm looking in the right place, but $132.54 a month for a Side P...

daveOP•1/31/25, 7:52 PM

Should be $43.8/m for 0.5 ACUs (assuming you never scale to zero) + $3.65/m for IPv4. Then there's some extra costs for bandwidth and I/O, but it's pretty small for (most?) workloads.

Ddave Should be $43.8/m for 0.5 ACUs (assuming you never scale to zero) + $3.65/m for ...

Hard@Work•1/31/25, 7:53 PM

Yeah, idk what Max is running, but side project, in my mind at least, is something that would fit on a free-tier Supabase/Xata/Neon(also since you probably don't need redundancy or other jazz)

Hard@Work•1/31/25, 7:54 PM

If you bundled many projects together onto a single database, it might be more worth it, but imo it's still a lot more pricy than the hobby alternatives.

HHard@Work Yeah, idk what Max is running, but side project, in my mind at least, is somethi...

daveOP•1/31/25, 8:45 PM

Neon is $69/m for 750 hours

That's pretty easy to do. I already wrote a function for refreshing the IAM token, so I'd just need

Similar Threads