QA » openQA Project » openQA Infrastructure

Motivation¶

The setup and configuration of the central postgres database on osd is currently not covered by salt

Acceptance criteria¶

• AC1: The currently necessary configuration for the openQA postgres database on osd is ensured by salt

Suggestions¶

• Make sure that salt recipes ensure persistence of this configuration, maybe we should use https://github.com/saltstack-formulas/postgres-formula ?
• Look into exposing read-only database access to make queries available, e.g. similar to what we already do for "telegraf" in https://gitlab.suse.de/openqa/salt-states-openqa/-/blob/master/openqa/server.sls#L163 but including the "job_modules" table
  • take https://gitlab.suse.de/openqa/salt-states-openqa/-/merge_requests/395 as inspiration
• Allow access to postgres database from outside "localhost":
  • Research security implications and "best practices", e.g. follow https://blog.bigbinary.com/2016/01/23/configure-postgresql-to-allow-remote-connection.html
  • Change postgres "listen" address in postgresql.conf to listen to the ethernet device and not only localhost, e.g. postgr
  • Change postgres config in pg_hba.conf to allow access for remote connections