947362 - New mysql user for BMO

Status: RESOLVED FIXED

(Data & BI Services Team :: DB: MySQL, task)

Description

[Kendall Libby [:fubar] (he/him)]

Need a mysql user/pw created for the pulse bugzilla_simple_shim in bug 940725, "with r/w access only to that one table (push_notify)."  It'll be on bugzilla-dev for the moment, but presumably will go to prod at some point. I'm not sure what other info you might need, so shout if I've left something out. 

Feel free to drop it in heira secrets, since I'll be pulling it into a puppet module. Thx!

Comment 1

[Sheeri Cabral [:sheeri]]

The only other thing I need is where the user is going to be coming from - through the load balancer? from localhost? etc.

Comment 2

[Kendall Libby [:fubar] (he/him)]

Sure thing. As it turns out, I actually need to users for BMO, so...

pulse bugzilla_simple_shim:
bugzilla_dev currently, prod eventually
rw access to push_notify
coming from zeus (bugzilla-ro-vip.stage.db.scl3)

and the second user...

bugzilla_etl (bug 922877)
production bugzilla db, read-only access
coming from zeus (bugzilla-ro-vip.db.scl3)

Thanks!!

Comment 3

[Sheeri Cabral [:sheeri]]

elided passwords are in hiera site.yaml at the top (look for pulse_dev_user, etc). I wasn't sure if it wanted to be in nodes/ or whatever, so feel free to move the info around.

grant all on bugzilla_dev_allizom_org.push_notify to pulse_dev@10.22.70.20_ identified by 'ELIDED';
grant all on bugzilla_dev_allizom_org.push_notify to pulse_dev@10.22.70.21_ identified by 'ELIDED'; 

grant all on bugzilla_allizom_org.push_notify to pulse_stage@10.22.70.20_ identified by 'ELIDED';
grant all on bugzilla_allizom_org.push_notify to pulse_stage@10.22.70.21_ identified by 'ELIDED'; 

I've also put similar grants for production.