751707 - replace buildbot and buildbot_reader usernames/passwords globally

Status: RESOLVED FIXED

(Release Engineering :: General, defect)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

Per bug 751605, we'll need to replace these usernames/passwords with new credentials.  I've GPG'd these to bear, and he can spread them around as needed.

Comment 1

[Nick Thomas [:nthomas] (UTC+12)]

I've updated secrets.pp on master-puppet1, specifically
 buildbot_schedulerdb_user
 buildbot_schedulerdb_password
 buildbot_statusdb_user
 buildbot_statusdb_password

 buildapi_schedulerdb_user
 buildapi_schedulerdb_password
 buildapi_schedulerdb_rwuser
 buildapi_schedulerdb_rwpassword
 buildapi_statusdb_user
 buildapi_statusdb_password

Comment 2

[Nick Thomas [:nthomas] (UTC+12)]

Rail reports the masters are all done, and I have buildapi up again. Just need to do the right thing for the scheduler move to bm36.

Comment 3

[Nick Thomas [:nthomas] (UTC+12)]

I think that's everything in prod except for maybe autoland. lsblakk, do you use the buildbot_reader user when talking to the buildbot_schedulers db ?

Comment 4

[Lukas Blakk [:lsblakk] use ?needinfo]

We do use buildbot_reader for schedulerdbpoller (in autoland) - will need these updated passwords please.

Comment 5

[Nick Thomas [:nthomas] (UTC+12)]

After speak to Lukas, she's going to take care of autoland-staging02 (current production). Dustin, can you take care of the new dev/staging/prod systems ?

Comment 6

[Dustin J. Mitchell [:dustin] (he/him)]

It's arguable which are "production" :)

I updated the password on the production autoland cluster and pushed.

Comment 7

[Dustin J. Mitchell [:dustin] (he/him)]

Are we done here?  Can we delete the old usernames?

Comment 8

[Mike Taylor [:bear]]

need to hear back that autoland has changed

Comment 9

[Dustin J. Mitchell [:dustin] (he/him)]

autoland-staging* are fixed, per lukas