Andrew Bogott has uploaded a new change for review.
https://gerrit.wikimedia.org/r/197367
Change subject: Add support for a pdns db admin account.
......................................................................
Add support for a pdns db admin account.
This will be used when running the designate upgrade scripts and such.
This patch also does a bit of cleanup, pulling db usernames from
the private repo rather than hard-coding.
Bug: T92984
Change-Id: I8d66b8d52bdebcc05ac7247a659aef8a4fb508be
---
M manifests/role/designate.pp
M modules/openstack/templates/icehouse/designate/designate.conf.erb
2 files changed, 16 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/67/197367/1
diff --git a/manifests/role/designate.pp b/manifests/role/designate.pp
index 12f0ef5..612b47d 100644
--- a/manifests/role/designate.pp
+++ b/manifests/role/designate.pp
@@ -5,11 +5,13 @@
$commondesignateconfig = {
db_name => 'designate',
- db_user => 'designate',
+ db_user => $passwords::designate::db_user,
db_pass => $passwords::designate::db_pass,
pdns_db_name => 'pdns',
- pdns_db_user => 'pdns',
+ pdns_db_user => $passwords::pdns::db_user,
pdns_db_pass => $passwords::pdns::db_pass,
+ pdns_db_admin_user => $passwords::pdns::db_admin_user,
+ pdns_db_admin_pass => $passwords::pdns::db_admin_pass,
}
}
diff --git a/modules/openstack/templates/icehouse/designate/designate.conf.erb
b/modules/openstack/templates/icehouse/designate/designate.conf.erb
index 7555db2..3758b91 100644
--- a/modules/openstack/templates/icehouse/designate/designate.conf.erb
+++ b/modules/openstack/templates/icehouse/designate/designate.conf.erb
@@ -241,3 +241,15 @@
idle_timeout = 3600
max_retries = 10
retry_interval = 10
+
+
+# This is an alternate db account with more rights -- this setting should
+# be used when running the db-sync command and the like during upgrades.
+#[backend:powerdns]
+#database_connection = mysql://<%= designateconfig["pdns_db_admin_user"]
%>:<%= designateconfig["pdns_db_admin_pass"] %>@<%= designateconfig["db_host"]
%>/<%= designateconfig["pdns_db_name"] %>
+#connection_debug = 100
+#connection_trace = True
+#sqlite_synchronous = True
+#idle_timeout = 3600
+#max_retries = 10
+#retry_interval = 10
--
To view, visit https://gerrit.wikimedia.org/r/197367
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I8d66b8d52bdebcc05ac7247a659aef8a4fb508be
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits