Jcrespo has submitted this change and it was merged. (
https://gerrit.wikimedia.org/r/369832 )
Change subject: mariadb/phabricator: update GRANTS from iridium to phab1001
..
mariadb/phabricator: update GRANTS from iridium to phab1001
The goal here is to replace iridium.eqiad.wmnet with
phab1001.eqiad.wmnet as the Phabricator server.
So it was just replace the IP where i find it.
10.64.32.150 = iridium.eqiad.wmnet
10.64.16.8 = phab1001.eqiad.wmnet
This hashes have to go away, they will be removed on a separate
ticket to match actual production passwords.
Bug: T163938
Change-Id: I821146a5d01382b934b928da251e3529b064666a
---
M modules/role/templates/mariadb/grants/production-m3.sql.erb
1 file changed, 18 insertions(+), 17 deletions(-)
Approvals:
jenkins-bot: Verified
Jcrespo: Looks good to me, approved
diff --git a/modules/role/templates/mariadb/grants/production-m3.sql.erb
b/modules/role/templates/mariadb/grants/production-m3.sql.erb
index 1b02471..68472bb 100644
--- a/modules/role/templates/mariadb/grants/production-m3.sql.erb
+++ b/modules/role/templates/mariadb/grants/production-m3.sql.erb
@@ -1,3 +1,4 @@
+-- start updating grants
-- haproxy@dbproxy1003
GRANT USAGE
@@ -8,14 +9,14 @@
GRANT USAGE
ON *.* TO 'haproxy'@'10.64.32.157';
--- phadmin@iridium
+-- phadmin@phab1001
GRANT USAGE
-ON *.* TO 'phadmin'@'10.64.32.150'
+ON *.* TO 'phadmin'@'10.64.16.8'
IDENTIFIED BY PASSWORD '*4882BF5FB61F6C0D5935BFA407BB6B6086421A5F';
GRANT ALL PRIVILEGES
-ON `phabricator%`.* TO 'phadmin'@'10.64.32.150';
+ON `phabricator%`.* TO 'phadmin'@'10.64.16.8';
-- phadmin@dbproxy1003
GRANT USAGE
@@ -33,17 +34,17 @@
GRANT ALL PRIVILEGES
ON `phabricator%`.* TO 'phadmin'@'10.64.32.157';
--- phuser@iridium
+-- phuser@phab1001
GRANT REPLICATION CLIENT
-ON *.* TO 'phuser'@'10.64.32.150'
+ON *.* TO 'phuser'@'10.64.16.8'
IDENTIFIED BY PASSWORD '*986DF0EF210E895FAAA2D71A8AF0F4EEA4D93E2A';
GRANT CREATE, DROP
-ON `phabricator_cache`.`cache_markupcache` TO 'phuser'@'10.64.32.150';
+ON `phabricator_cache`.`cache_markupcache` TO 'phuser'@'10.64.16.8';
GRANT DELETE, EXECUTE, INSERT, SELECT, SHOW VIEW, UPDATE
-ON `phabricator%`.* TO 'phuser'@'10.64.32.150';
+ON `phabricator%`.* TO 'phuser'@'10.64.16.8';
-- phuser@dbproxy1003
@@ -52,7 +53,7 @@
IDENTIFIED BY PASSWORD '*986DF0EF210E895FAAA2D71A8AF0F4EEA4D93E2A';
GRANT CREATE, DROP
-ON `phabricator_cache`.`cache_markupcache` TO 'phuser'@'10.64.0.198';
+ON `phabricator_cache`.`cache_markupcache` TO 'phuser'@'10.64.16.8';
GRANT DELETE, EXECUTE, INSERT, SELECT, SHOW VIEW, UPDATE
ON `phabricator%`.* TO 'phuser'@'10.64.0.198';
@@ -69,15 +70,15 @@
GRANT DELETE, EXECUTE, INSERT, SELECT, SHOW VIEW, UPDATE
ON `phabricator%`.* TO 'phuser'@'10.64.32.157';
--- phstats@iridium
+-- phstats@phab1001
GRANT USAGE
-ON *.* TO 'phstats'@'10.64.32.150'
+ON *.* TO 'phstats'@'10.64.16.8'
IDENTIFIED BY PASSWORD '*FB8AA9D0E19A01A13E7FB1037FC964F7887D22F5';
-GRANT SELECT ON `phabricator_maniphest`.* TO 'phstats'@'10.64.32.150';
-GRANT SELECT ON `phabricator_user`.* TO 'phstats'@'10.64.32.150';
-GRANT SELECT ON `phabricator_project`.* TO 'phstats'@'10.64.32.150';
-GRANT SELECT ON `phabricator_differential`.* TO 'phstats'@'10.64.32.150';
+GRANT SELECT ON `phabricator_maniphest`.* TO 'phstats'@'10.64.16.8';
+GRANT SELECT ON `phabricator_user`.* TO 'phstats'@'10.64.16.8';
+GRANT SELECT ON `phabricator_project`.* TO 'phstats'@'10.64.16.8';
+GRANT SELECT ON `phabricator_differential`.* TO 'phstats'@'10.64.16.8';
-- phstats@dbproxy1003
@@ -99,14 +100,14 @@
GRANT SELECT ON `phabricator_project`.* TO 'phstats'@'10.64.32.157';
GRANT SELECT ON `phabricator_differential`.* TO 'phstats'@'10.64.32.157';
--- phmanifest@iridium
+-- phmanifest@phab1001
GRANT USAGE
-ON *.* TO 'phmanifest'@'10.64.32.150'
+ON *.* TO 'phmanifest'@'10.64.16.8'
IDENTIFIED BY PASSWORD '*57879C423C685FDF9F3F4E3DB71207E76A8384C4';
GRANT SELECT
-ON `phabricator_maniphest`.* TO 'phmanifest'@'10.64.32.150';
+ON `phabricator_maniphest`.* TO 'phmanifest'@'10.64.16.8';
-- phmanifest@dbproxy1003
--
To view, visit https://gerrit.wikimedia.org/r/369832
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I821146a5d01382b934b928da251e3529b064666a
Gerrit-PatchSet: 7
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn
Gerrit-Reviewer: 20after4
Gerrit-Reviewer: Dzahn
Gerrit-Reviewer: Giuseppe Lavagetto
Gerrit-Reviewer: HakanIST
Gerrit-Reviewer: Jcrespo
Gerrit-Reviewer: Marostegui
Gerrit-Reviewer: Paladox
Gerrit-Reviewer: jenkins-bot <>