Actions
action #78222
openPersistent postgres setup and configuration in salt
Start date:
Due date:
% Done:
0%
Estimated time:
Tags:
Description
Motivation¶
The setup and configuration of the central postgres database on osd is currently not covered by salt
Acceptance criteria¶
- AC1: The currently necessary configuration for the openQA postgres database on osd is ensured by salt
Suggestions¶
- Make sure that salt recipes ensure persistence of this configuration, maybe we should use https://github.com/saltstack-formulas/postgres-formula ?
- Look into exposing read-only database access to make queries available, e.g. similar to what we already do for "telegraf" in https://gitlab.suse.de/openqa/salt-states-openqa/-/blob/master/openqa/server.sls#L163 but including the "job_modules" table
- take https://gitlab.suse.de/openqa/salt-states-openqa/-/merge_requests/395 as inspiration
- Allow access to postgres database from outside "localhost":
- Research security implications and "best practices", e.g. follow https://blog.bigbinary.com/2016/01/23/configure-postgresql-to-allow-remote-connection.html
- Change postgres "listen" address in postgresql.conf to listen to the ethernet device and not only localhost, e.g. postgr
- Change postgres config in pg_hba.conf to allow access for remote connections
Actions