830882 - Put pgbouncer auth configs in stage (and prod?) under revision control

Status: RESOLVED FIXED

(Data & BI Services Team :: DB: MySQL, task, P2)

Description

[Selena Deckelmann :selenamarie :selena]

We had a password change that took stage offline for several days. We weren't sure what happened.

Let's get: 

-rw-r--r-- 1 root root  517 Jan 14 09:32 pg_auth_web.conf
-rw-r--r-- 1 root root  517 Jan 14 09:32 pg_auth_processor.conf

Under revision control on all Socorro systems.

Comment 1

[Selena Deckelmann :selenamarie :selena]

Also, could do something like put this in a crontab: 

https://github.com/markokr/pgbouncer-dev/blob/master/etc/mkauth.py

The passwords don't appear to be the same as the output from 'md5sum', so pulling a shadowed password out of PostgreSQL would be the easiest path forward.

Comment 2

[Matt Pressman [:mpressman]]

The configs have been added to the new postgres module. I will backport into the postgres2 module for use until switching over to the new postgres module.

Comment 3

[Matt Pressman [:mpressman]]

adding pg_bouncer_allowed_rules deceleration from postgres module to postgres2 module

Comment 4

[Matt Pressman [:mpressman]]

added pgbouncer_allowed_rules to stage and prod nodes/socorro.pp for hosts:
tp-socorro01-master01.phx1
tp-socorro01-master02.phx1
socorro1.stage.db.phx1

Committed revision 74717.

Comment 5

[Matt Pressman [:mpressman]]

backported pgbouncer.pp and pgbouncer/server.pp from postgres to postgres2
Committed revision 74722.

Comment 6

[Matt Pressman [:mpressman]]

added postgres2::pgbouncer class to tp-socorro01-master01
Committed revision 74725.

Comment 7

[Matt Pressman [:mpressman]]

socorro1.db.phx1.mozilla.com has pgbouncer auth configs and pgbouncer.ini under puppet control
socorro3.db.phx1.mozilla.com has pgbouncer auth configs and pgbouncer.ini under puppet control
socorro-reporting1.db.phx1.mozilla.com has pgbouncer auth configs and pgbouncer.ini under puppet control

The module has been back ported and just needs to be applied to 
tp-socorro01-master02.phx1.mozilla.com
and
socorro1.stage.db.phx1.mozilla.com

Comment 8

[Matt Pressman [:mpressman]]

added socorro1.stage.db.phx1 (stage) to pgbouncer puppet control

Comment 9

[Matt Pressman [:mpressman]]

socorro1.stage.db.phx1 in Committed revision 75229

Comment 10

[Matt Pressman [:mpressman]]

tp-socorro01-master02.phx1 added in Committed revision 75232

Comment 11

[Matt Pressman [:mpressman]]

This is now complete