diff --git a/data/hostname/met.internal.softwareheritage.org.yaml b/data/hostname/met.internal.softwareheritage.org.yaml index 871d0de1..85a872ed 100644 --- a/data/hostname/met.internal.softwareheritage.org.yaml +++ b/data/hostname/met.internal.softwareheritage.org.yaml @@ -1,110 +1,301 @@ backups::exclude: - var/lib/rabbitmq users: ardumont: groups: - docker aeviso: groups: - sudo - docker ddouard: groups: - sudo - docker jayesh: groups: - sudo - docker olasd: groups: - docker vsellier: groups: - docker zack: groups: - docker icinga2::host::vars: load: high swh::apt_config::enable_non_free: true packages: - intel-microcode # install zfs - zfs-dkms rabbitmq::python_package: 'python3' rabbitmq::server::users: - name: "swh-provenance" is_admin: true password: "%{hiera('rabbitmq::monitoring::provenance::password')}" tags: [] - name: swh-provenance-consumer is_admin: false password: "%{hiera('swh::deploy::provenance::consumer::password')}" tags: [] - name: swh-provenance-producer is_admin: false password: "%{hiera('swh::deploy::provenance::producer::password')}" tags: [] swh::postgresql::version: 13 # hack to don't hang in bullseye postgresql::globals::version: "%{lookup('swh::postgresql::version')}" swh::postgresql::listen_addresses: - 0.0.0.0 swh::postgresql::port: 5433 swh::postgresql::cluster_name: "%{lookup('swh::postgresql::version')}/main" swh::postgresql::datadir_base: "%{lookup('swh::base_directory')}/postgres" swh::postgresql::datadir: "%{lookup('swh::postgresql::datadir_base')}/%{lookup('swh::postgresql::cluster_name')}" swh::postgresql::network_accesses: - 192.168.100.0/24 # Monitoring - 192.168.100.0/24 # Internal network # using an indirection to allow the override for vagrant swh::postgresql::shared_buffers: "%{lookup('swh::provenance::db::shared_buffers')}" postgresql::server::config_entries: shared_buffers: "%{alias('swh::postgresql::shared_buffers')}" cluster_name: "%{alias('swh::postgresql::cluster_name')}" swh::dbs: provenance: name: "%{hiera('swh::deploy::provenance::db::dbname')}" user: "%{hiera('swh::deploy::provenance::db::user')}" + test0: + name: test0 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test1: + name: test1 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test2: + name: test2 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test3: + name: test3 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test4: + name: test4 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test5: + name: test5 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test6: + name: test6 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test7: + name: test7 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test8: + name: test8 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + test9: + name: test9 + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" # What aliases to install in .pg_service/.pgpass swh::postgres::service::dbs: - alias: swh-provenance name: "%{hiera('swh::deploy::provenance::db::dbname')}" host: "%{hiera('swh::deploy::provenance::db::host')}" port: "%{hiera('swh::deploy::db::pgbouncer::port')}" user: guest - alias: admin-swh-provenance name: "%{hiera('swh::deploy::provenance::db::dbname')}" host: "%{hiera('swh::deploy::provenance::db::host')}" port: "%{hiera('swh::deploy::db::pgbouncer::port')}" user: "%{hiera('swh::deploy::provenance::db::user')}" password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test0 + name: test0 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test0-admin + name: test0 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test1 + name: test1 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test1-admin + name: test1 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test2 + name: test2 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test2-admin + name: test2 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test3 + name: test3 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test3-admin + name: test3 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test4 + name: test4 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test4-admin + name: test4 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test5 + name: test5 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test5-admin + name: test5 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test6 + name: test6 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test6-admin + name: test6 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test7 + name: test7 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test7-admin + name: test7 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test8 + name: test8 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test8-admin + name: test8 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + - alias: test9 + name: test9 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: guest + - alias: test9-admin + name: test9 + host: "%{hiera('swh::deploy::provenance::db::host')}" + port: "%{hiera('swh::deploy::db::pgbouncer::port')}" + user: "%{hiera('swh::deploy::provenance::db::user')}" + password: "%{hiera('swh::deploy::provenance::db::password')}" + # Install the .pg_service/.pgpass files to those users swh::postgres::service::users: - root - zack - ardumont - aeviso - vsellier pgbouncer::auth_hba_file: /etc/postgresql/13/main/pg_hba.conf pgbouncer::listen_addr: 192.168.100.110 pgbouncer::databases: - source_db: "%{hiera('swh::deploy::provenance::db::dbname')}" host: "%{hiera('swh::deploy::provenance::db::host')}" auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test0 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test1 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test2 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test3 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test4 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test5 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test6 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test7 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test8 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}" + - source_db: test9 + host: "%{hiera('swh::deploy::provenance::db::host')}" + auth_user: "%{hiera('swh::deploy::db::pgbouncer::user::login')}" + port: "%{hiera('swh::deploy::db::main::port')}"