1533178 - Add a Postgres database to the autograph hsm infrastructure

Status: RESOLVED FIXED

(Cloud Services :: Operations: Autograph, enhancement)

Description

[Julien Vehent]

Deploy a postgres database in the autograph-hsm stage and prod environments, initialized with the following schema: https://github.com/mozilla-services/autograph/blob/master/database/schema.sql (only using a better password...)

Comment 1

[Miles Crabill [:miles]]

I've deployed a postgres 10.6 database to the autograph-hsm stage environment and added the connection information to the autograph config. Once we're happy with things we can deploy prod.

Relevant PR: https://github.com/mozilla-services/cloudops-deployment/pull/2999

Comment 2

[Greg G]

:miles are the autograph app instances importing the https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem bundle (per https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.SSL)?

Comment 3

[Greg G]

per irc: we'll put the cert bundle in the app container

Comment 4

[Greg G]

PR to add SSLRootCert to DSN and bundle RDS cert bundle w/ app build: https://github.com/mozilla-services/autograph/pull/260

Comment 5

[Greg G]

Stage is set up and autograph stage can connect to it.

Comment 6

[Greg G]

:miles does a prod DB exist? I don't see anything on https://us-west-2.console.aws.amazon.com/rds/home?region=us-west-2#databases:

Comment 7

[Greg G]

We have a prod DB and the config is updated.