Put pgbouncer auth configs in stage (and prod?) under revision control

RESOLVED FIXED

Status

Data & BI Services Team
DB: MySQL
P2
normal
RESOLVED FIXED
5 years ago
4 years ago

People

(Reporter: selenamarie, Assigned: mpressman)

Tracking

Details

(Whiteboard: [2013q3] August)

We had a password change that took stage offline for several days. We weren't sure what happened.

Let's get: 

-rw-r--r-- 1 root root  517 Jan 14 09:32 pg_auth_web.conf
-rw-r--r-- 1 root root  517 Jan 14 09:32 pg_auth_processor.conf

Under revision control on all Socorro systems.
Also, could do something like put this in a crontab: 

https://github.com/markokr/pgbouncer-dev/blob/master/etc/mkauth.py

The passwords don't appear to be the same as the output from 'md5sum', so pulling a shadowed password out of PostgreSQL would be the easiest path forward.
(Assignee)

Comment 2

5 years ago
The configs have been added to the new postgres module. I will backport into the postgres2 module for use until switching over to the new postgres module.
(Assignee)

Updated

5 years ago
Assignee: server-ops-database → mpressman
Whiteboard: [2013q3]
Priority: -- → P2
Whiteboard: [2013q3] → [2013q3] August
(Assignee)

Comment 3

5 years ago
adding pg_bouncer_allowed_rules deceleration from postgres module to postgres2 module
(Assignee)

Comment 4

5 years ago
added pgbouncer_allowed_rules to stage and prod nodes/socorro.pp for hosts:
tp-socorro01-master01.phx1
tp-socorro01-master02.phx1
socorro1.stage.db.phx1

Committed revision 74717.
(Assignee)

Comment 5

5 years ago
backported pgbouncer.pp and pgbouncer/server.pp from postgres to postgres2
Committed revision 74722.
(Assignee)

Comment 6

5 years ago
added postgres2::pgbouncer class to tp-socorro01-master01
Committed revision 74725.
(Assignee)

Updated

5 years ago
Depends on: 915889
(Assignee)

Comment 7

5 years ago
socorro1.db.phx1.mozilla.com has pgbouncer auth configs and pgbouncer.ini under puppet control
socorro3.db.phx1.mozilla.com has pgbouncer auth configs and pgbouncer.ini under puppet control
socorro-reporting1.db.phx1.mozilla.com has pgbouncer auth configs and pgbouncer.ini under puppet control

The module has been back ported and just needs to be applied to 
tp-socorro01-master02.phx1.mozilla.com
and
socorro1.stage.db.phx1.mozilla.com
(Assignee)

Comment 8

5 years ago
added socorro1.stage.db.phx1 (stage) to pgbouncer puppet control
(Assignee)

Comment 9

5 years ago
socorro1.stage.db.phx1 in Committed revision 75229
(Assignee)

Comment 10

5 years ago
tp-socorro01-master02.phx1 added in Committed revision 75232
(Assignee)

Comment 11

5 years ago
This is now complete
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
Product: mozilla.org → Data & BI Services Team
You need to log in before you can comment on or make changes to this bug.