unkin/puppet-prod
3
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: move pg_hba to hieradata

Browse Source 
- remove hardcoded pg_hba
- move pg_hba to hieradata
This commit is contained in:
Ben Vincent
2025-07-05 11:15:59 +10:00
parent a9faa098ee
commit 00edd627df
3 changed files with 18 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hieradata/roles/infra/puppetdb/sql.yaml
+8
View File
@@ -15,6 +15,14 @@ profiles::sql::patroni::cluster_name: "patroni-puppetdb-%{facts.environment}"
profiles::sql::patroni::postgres_exporter_enabled: true
profiles::sql::patroni::postgres_exporter_user: postgres_exporter
profiles::sql::patroni::pgsql_version: "17"
patroni::bootstrap_pg_hba:
- 'local all postgres ident'
- 'host all all 0.0.0.0/0 md5'
- 'host replication repl 0.0.0.0/0 md5'
patroni::pgsql_pg_hba:
- 'local all postgres ident'
- 'host all all 0.0.0.0/0 md5'
- 'host replication repl 0.0.0.0/0 md5'
# FIXME: puppet-python wants to try manage python-dev, which is required by the ceph package
python::manage_dev_package: false
hieradata/roles/infra/sql/shared.yaml
+10
View File
@@ -15,6 +15,16 @@ profiles::sql::patroni::cluster_name: "patroni-shared-%{facts.environment}"
profiles::sql::patroni::postgres_exporter_enabled: true
profiles::sql::patroni::postgres_exporter_user: postgres_exporter
profiles::sql::patroni::pgsql_version: "17"
patroni::bootstrap_pg_hba:
- 'local all postgres ident'
- 'host all all 0.0.0.0/0 md5'
- 'host gitea gitea 0.0.0.0/0 scram-sha-256'
- 'host replication repl 0.0.0.0/0 md5'
patroni::pgsql_pg_hba:
- 'local all postgres ident'
- 'host all all 0.0.0.0/0 md5'
- 'host gitea gitea 0.0.0.0/0 scram-sha-256'
- 'host replication repl 0.0.0.0/0 md5'
python::manage_dev_package: false