Change Details

up dali and puppet installs dbs for all the admin services we want with the right encoding and collation [1]: ``` $ vagrant up dali $ vagrant ssh dali; su - postgres; psql -c \l+ List of databases Name | Owner | Encoding | Collate | Ctype | Access privileges | Size | Tablespace | Description -----------+----------+-----------+---------+---------+-----------------------+---------+------------+-------------------------------------------- grafana | grafana | UTF8 | C.UTF-8 | C.UTF-8 | =T/grafana +| 8625 kB | pg_default | | | | | | grafana=CTc/grafana +| | | | | | | | guest=c/grafana | | | hedgedoc | hedgedoc | UTF8 | C.UTF-8 | C.UTF-8 | =T/hedgedoc +| 8625 kB | pg_default | | | | | | hedgedoc=CTc/hedgedoc+| | | | | | | | guest=c/hedgedoc | | | keycloak | keycloak | UTF8 | C.UTF-8 | C.UTF-8 | =T/keycloak +| 8625 kB | pg_default | | | | | | keycloak=CTc/keycloak+| | | | | | | | guest=c/keycloak | | | netbox | netbox | UTF8 | C.UTF-8 | C.UTF-8 | =T/netbox +| 8625 kB | pg_default | | | | | | netbox=CTc/netbox +| | | | | | | | guest=c/netbox | | | postgres | postgres | SQL_ASCII | C | C | | 8833 kB | pg_default | default administrative connection database sentry | sentry | UTF8 | C.UTF-8 | C.UTF-8 | =T/sentry +| 8625 kB | pg_default | | | | | | sentry=CTc/sentry +| | | | | | | | guest=c/sentry | | | template0 | postgres | SQL_ASCII | C | C | =c/postgres +| 8625 kB | pg_default | unmodifiable empty database | | | | | postgres=CTc/postgres | | | template1 | postgres | SQL_ASCII | C | C | =c/postgres +| 8777 kB | pg_default | default template for new databases | | | | | postgres=CTc/postgres | | | ``` [1] T3833#76813

up dali and puppet installs dbs for all the admin services we want with the right encoding and collation [1]: ``` $ vagrant up dali $ vagrant ssh dali; su - postgres; psql -c \l+ List of databases Name | Owner | Encoding | Collate | Ctype | Access privileges | Size | Tablespace | Description -----------+----------+-----------+---------+---------+-----------------------+---------+------------+-------------------------------------------- grafana | grafana | UTF8 | C.UTF-8 | C.UTF-8 | =T/grafana +| 8625 kB | pg_default | | | | | | grafana=CTc/grafana +| | | | | | | | guest=c/grafana | | | hedgedoc | hedgedoc | UTF8 | C.UTF-8 | C.UTF-8 | =T/hedgedoc +| 8625 kB | pg_default | | | | | | hedgedoc=CTc/hedgedoc+| | | | | | | | guest=c/hedgedoc | | | keycloak | keycloak | UTF8 | C.UTF-8 | C.UTF-8 | =T/keycloak +| 8625 kB | pg_default | | | | | | keycloak=CTc/keycloak+| | | | | | | | guest=c/keycloak | | | netbox | netbox | UTF8 | C.UTF-8 | C.UTF-8 | =T/netbox +| 8625 kB | pg_default | | | | | | netbox=CTc/netbox +| | | | | | | | guest=c/netbox | | | postgres | postgres | SQL_ASCII | C | C | | 8833 kB | pg_default | default administrative connection database sentry | sentry | UTF8 | C.UTF-8 | C.UTF-8 | =T/sentry +| 8625 kB | pg_default | | | | | | sentry=CTc/sentry +| | | | | | | | guest=c/sentry | | | template0 | postgres | SQL_ASCII | C | C | =c/postgres +| 8625 kB | pg_default | unmodifiable empty database | | | | | postgres=CTc/postgres | | | template1 | postgres | SQL_ASCII | C | C | =c/postgres +| 8777 kB | pg_default | default template for new databases | | | | | postgres=CTc/postgres | | | ``` octo-diff happy: ``` bin/octocatalog-diff --to staging dali Found host dali.internal.admin.swh.network WARN -> Environment "staging-add-prometheus-metrics" contained non-word characters, correcting name to staging_add_prometheus_metrics WARN -> Environment "staging-bullseye-rabbitmq-plugin" contained non-word characters, correcting name to staging_bullseye_rabbitmq_plugin WARN -> Environment "staging-check-journal-client" contained non-word characters, correcting name to staging_check_journal_client WARN -> Environment "staging-check-journal-client-2nd-implementation" contained non-word characters, correcting name to staging_check_journal_client_2nd_implementation WARN -> Environment "staging-check-journal-client-first-implem" contained non-word characters, correcting name to staging_check_journal_client_first_implem WARN -> Environment "staging-pin" contained non-word characters, correcting name to staging_pin Cloning into '/tmp/swh-ocd.dS8pQicw/environments/production/data/private'... done. Cloning into '/tmp/swh-ocd.dS8pQicw/environments/staging/data/private'... done. *** Running octocatalog-diff on host dali.internal.admin.swh.network I, [2022-01-13T12:05:21.697358 #69053] INFO -- : Catalogs compiled for dali.internal.admin.swh.network I, [2022-01-13T12:05:22.161920 #69053] INFO -- : Diffs computed for dali.internal.admin.swh.network diff origin/production/dali.internal.admin.swh.network current/dali.internal.admin.swh.network ******************************************* + Anchor[apt_key B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8 present] ******************************************* + Anchor[postgresql::server::service::begin] ******************************************* + Anchor[postgresql::server::service::end] ******************************************* + Apt::Key[Add key: B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8 from Apt::Source pgdg] => parameters => "content": "-----BEGIN PGP PUBLIC KEY BLOCK-----\n\nmQINBE6XR8IBEACVdDKT2HEH... "ensure": "present", "id": "B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8", "server": "keyserver.ubuntu.com", "weak_ssl": false ******************************************* + Apt::Setting[list-pgdg] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n# pgdg\ndeb http... "ensure": "present", "notify_update": true, "priority": 50 ******************************************* + Apt::Setting[list-pglogical] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n# pglogical\ndeb... "ensure": "absent", "notify_update": true, "priority": 50 ******************************************* + Apt::Source[pgdg] => parameters => "allow_unsigned": false, "comment": "pgdg", "ensure": "present", "include": { }, "key": { "id": "B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8", "content": "-----BEGIN PGP PUBLIC KEY BLOCK-----\n\nmQINBE6XR8IBEACVdDKT2H... }, "location": "https://apt.postgresql.org/pub/repos/apt/", "notify_update": true, "release": "bullseye-pgdg", "repos": "main" ******************************************* + Apt::Source[pglogical] => parameters => "allow_unsigned": false, "comment": "pglogical", "ensure": "absent", "include": { }, "notify_update": true, "repos": "main" ******************************************* + Apt_key[Add key: B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8 from Apt::Source pgdg] => parameters => "content": "-----BEGIN PGP PUBLIC KEY BLOCK-----\n\nmQINBE6XR8IBEACVdDKT2HEH... "ensure": "present", "id": "B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8", "refresh": false, "server": "keyserver.ubuntu.com", "weak_ssl": false ******************************************* + Concat::Fragment[pg_hba_rule_allow access to all users] => parameters => "content": "\n# Rule Name: allow access to all users\n# Description: none\n#... "order": "100", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_allow access to ipv6 localhost] => parameters => "content": "\n# Rule Name: allow access to ipv6 localhost\n# Description: no... "order": "101", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_allow localhost TCP access to postgresql user] => parameters => "content": "\n# Rule Name: allow localhost TCP access to postgresql user\n# ... "order": "003", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_local access as postgres user] => parameters => "content": "\n# Rule Name: local access as postgres user\n# Description: non... "order": "001", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_local access to database with same name] => parameters => "content": "\n# Rule Name: local access to database with same name\n# Descri... "order": "002", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_postgresql class generated rule ipv4acls 0] => parameters => "content": "\n# Rule Name: postgresql class generated rule ipv4acls 0\n# Des... "order": "010", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat[/etc/postgresql/14/main/pg_hba.conf] => parameters => "backup": "puppet", "ensure": "present", "ensure_newline": false, "force": false, "format": "plain", "group": "postgres", "mode": "0640", "notify": "Class[Postgresql::Server::Reload]", "order": "alpha", "owner": "postgres", "path": "/etc/postgresql/14/main/pg_hba.conf", "replace": true, "show_diff": true, "warn": true ******************************************* + Concat[/etc/postgresql/14/main/pg_ident.conf] => parameters => "backup": "puppet", "ensure": "present", "ensure_newline": false, "force": false, "format": "plain", "group": "postgres", "mode": "0640", "notify": "Class[Postgresql::Server::Reload]", "order": "alpha", "owner": "postgres", "path": "/etc/postgresql/14/main/pg_ident.conf", "replace": true, "show_diff": true, "warn": true ******************************************* + Concat_file[/etc/postgresql/14/main/pg_hba.conf] => parameters => "backup": "puppet", "ensure_newline": false, "force": false, "format": "plain", "group": "postgres", "mode": "0640", "order": "alpha", "owner": "postgres", "replace": true, "show_diff": true, "tag": "_etc_postgresql_14_main_pg_hba.conf" ******************************************* + Concat_file[/etc/postgresql/14/main/pg_ident.conf] => parameters => "backup": "puppet", "ensure_newline": false, "force": false, "format": "plain", "group": "postgres", "mode": "0640", "order": "alpha", "owner": "postgres", "replace": true, "show_diff": true, "tag": "_etc_postgresql_14_main_pg_ident.conf" ******************************************* + Concat_fragment[/etc/postgresql/14/main/pg_hba.conf_header] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n", "order": "0", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[/etc/postgresql/14/main/pg_ident.conf_header] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n", "order": "0", "tag": "_etc_postgresql_14_main_pg_ident.conf", "target": "/etc/postgresql/14/main/pg_ident.conf" ******************************************* + Concat_fragment[pg_hba_rule_allow access to all users] => parameters => "content": "\n# Rule Name: allow access to all users\n# Description: none\n#... "order": "100", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_allow access to ipv6 localhost] => parameters => "content": "\n# Rule Name: allow access to ipv6 localhost\n# Description: no... "order": "101", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_allow localhost TCP access to postgresql user] => parameters => "content": "\n# Rule Name: allow localhost TCP access to postgresql user\n# ... "order": "003", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_local access as postgres user] => parameters => "content": "\n# Rule Name: local access as postgres user\n# Description: non... "order": "001", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_local access to database with same name] => parameters => "content": "\n# Rule Name: local access to database with same name\n# Descri... "order": "002", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_postgresql class generated rule ipv4acls 0] => parameters => "content": "\n# Rule Name: postgresql class generated rule ipv4acls 0\n# Des... "order": "010", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[profile::cron::restart-sql-exporter] => parameters => "content": "# Cron snippet restart-sql-exporter\n26 0-20/4 * * * root chroni... "order": "10", "tag": "profile::cron::prometheus", "target": "profile::cron::prometheus" ******************************************* + Exec[postgresql_initdb] => parameters => "command": "/usr/lib/postgresql/14/bin/initdb --pgdata '/srv/postgresql/14/m... "creates": "/srv/postgresql/14/main/PG_VERSION", "cwd": "/tmp", "group": "postgres", "logoutput": "on_failure", "user": "postgres" ******************************************* + Exec[postgresql_reload] => parameters => "command": "service postgresql reload", "onlyif": "/usr/sbin/service postgresql@*-main status", "path": "/usr/bin:/usr/sbin:/bin:/sbin", "refreshonly": true ******************************************* + Exec[postgresql_stop_data_directory] => parameters => "command": "service postgresql stop", "logoutput": "on_failure", "onlyif": "service postgresql status", "path": "/usr/sbin:/sbin:/bin:/usr/bin:/usr/local/bin", "unless": "grep \"data_directory = '/srv/postgresql/14/main'\" /etc/postgres... ******************************************* + Exec[sed -e /dar\./d -e /swh-dar-backup/d -i /var/spool/cron/crontabs/root] => parameters => "onlyif": "grep -q swh-dar-backup /var/spool/cron/crontabs/root", "path": [ "/sbin", "/usr/sbin", "/bin", "/usr/bin" ] ******************************************* + Exec[set_postgres_postgrespw] => parameters => "command": "/usr/bin/psql -c \"ALTER ROLE \\\"postgres\\\" PASSWORD ${NEWPAS... "cwd": "/tmp", "environment": [ "PGPASSWORD=swh-deploy-db-postgres-password", "PGPORT=5432", "NEWPASSWD_ESCAPED=$$swh-deploy-db-postgres-password$$" ], "group": "postgres", "logoutput": true, "path": "/usr/bin:/usr/local/bin:/bin", "unless": "/usr/bin/psql -h localhost -p 5432 -c 'select 1' > /dev/null", "user": "postgres" ******************************************* + Exec[ssh-keygen -t ed25519 -f /root/.ssh/id_ed25519.borg -N ''] => parameters => "creates": "/root/.ssh/id_ed25519.borg", "path": [ "/bin", "/usr/bin" ] ******************************************* + File[/etc/apt/sources.list.d/pgdg.list] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n# pgdg\ndeb http... "ensure": "present", "group": "root", "notify": "Class[Apt::Update]", "owner": "root" ******************************************* + File[/etc/apt/sources.list.d/pglogical.list] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n# pglogical\ndeb... "ensure": "absent", "group": "root", "notify": "Class[Apt::Update]", "owner": "root" ******************************************* + File[/etc/borgmatic/config.yaml] => parameters => "content": "# File managed by puppet - modifications will be lost\nlocation:... "ensure": "present", "group": "root", "mode": "0600", "owner": "root" ******************************************* + File[/etc/borgmatic] => parameters => "ensure": "directory", "group": "root", "mode": "0600", "owner": "root" ******************************************* + File[/etc/default/prometheus-sql-exporter] => parameters => "content": "# File managed by puppet (module profile::prometheus::sql)\n# Ch... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/logrotate.d/swh-dar] => parameters => "ensure": "absent" ******************************************* + File[/etc/postgresql/14/main/postgresql.conf] => parameters => "ensure": "file", "group": "postgres", "mode": "0644", "owner": "postgres" ******************************************* + File[/etc/prometheus-sql-exporter/activity.yml] => parameters => "content": "# queries run once per cluster (via the 'postgres' database)\n\n... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/prometheus-sql-exporter/queries.yml] => parameters => "content": "# queries run once per cluster (via the 'postgres' database)\n\n... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/prometheus-sql-exporter/replication.yml] => parameters => "content": "# queries run once per cluster (via the 'postgres' database)\n\n... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/prometheus-sql-exporter/wal.yml] => parameters => "content": "# queries run once per cluster (via the 'postgres' database)\n\n... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/prometheus-sql-exporter] => parameters => "ensure": "directory", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/systemd/system/prometheus-sql-exporter.service.d/restart.conf] => parameters => "content": "[Service]\nRestart=always\nRestartSec=5\n", "ensure": "file", "group": "root", "mode": "0444", "notify": [ "Class[Systemd::Systemctl::Daemon_reload]" ], "owner": "root", "selinux_ignore_defaults": false, "show_diff": true ******************************************* + File[/etc/systemd/system/prometheus-sql-exporter.service.d/update_config.conf] => parameters => "content": "# File managed by puppet (module profile::prometheus::sql)\n# Ch... "ensure": "file", "group": "root", "mode": "0444", "notify": [ "Class[Systemd::Systemctl::Daemon_reload]" ], "owner": "root", "selinux_ignore_defaults": false, "show_diff": true ******************************************* + File[/etc/systemd/system/prometheus-sql-exporter.service.d] => parameters => "ensure": "directory", "group": "root", "owner": "root", "purge": true, "recurse": true, "selinux_ignore_defaults": false ******************************************* + File[/srv/backups] => parameters => "ensure": "absent", "force": true, "purge": true, "recurse": true ******************************************* + File[/srv/postgresql/14/main] => parameters => "ensure": "directory", "group": "postgres", "mode": "0700", "owner": "postgres" ******************************************* + File[/srv/postgresql/14] => parameters => "ensure": "directory", "group": "root", "mode": "0655", "owner": "root" ******************************************* + File[/srv/postgresql] => parameters => "ensure": "directory", "group": "root", "mode": "0655", "owner": "root" ******************************************* + File[/usr/bin/update-prometheus-sql-exporter-config] => parameters => "content": "#!/usr/bin/perl\n\nuse strict;\nuse warnings;\nuse PgCommon;\nus... "ensure": "present", "group": "root", "mode": "0755", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/usr/local/bin/swh-dar-backup] => parameters => "ensure": "absent" ******************************************* + File[/var/lib/borg] => parameters => "ensure": "directory", "group": "root", "mode": "0600", "owner": "root" ******************************************* + File[/var/log/dar] => parameters => "ensure": "absent", "force": true, "purge": true, "recurse": true ******************************************* + Node[dali.internal.admin.swh.network] ******************************************* - Node[default] ******************************************* + Package[borgbackup] => parameters => "ensure": "installed" ******************************************* + Package[borgmatic] => parameters => "ensure": "installed" ******************************************* + Package[libyaml-perl] => parameters => "ensure": "installed" ******************************************* + Package[postgresql-client-common] => parameters => "ensure": "installed" ******************************************* + Package[postgresql-server] => parameters => "ensure": "present", "name": "postgresql-14", "tag": "puppetlabs-postgresql" ******************************************* + Package[prometheus-sql-exporter] => parameters => "ensure": "installed" ******************************************* + Postgresql::Server::Config_entry[data_directory] => parameters => "ensure": "present", "path": false, "value": "/srv/postgresql/14/main" ******************************************* + Postgresql::Server::Config_entry[listen_addresses] => parameters => "ensure": "present", "path": false, "value": [ "0.0.0.0" ] ******************************************* + Postgresql::Server::Config_entry[max_connections] => parameters => "ensure": "present", "path": false, "value": 100 ******************************************* + Postgresql::Server::Config_entry[port] => parameters => "ensure": "present", "path": false, "value": 5432 ******************************************* + Postgresql::Server::Config_entry[shared_preload_libraries] => parameters => "ensure": "present", "path": false, "value": "pg_stat_statements" ******************************************* + Postgresql::Server::Database[grafana] => parameters => "connect_settings": { }, "dbname": "grafana", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "grafana", "template": "template0" ******************************************* + Postgresql::Server::Database[hedgedoc] => parameters => "connect_settings": { }, "dbname": "hedgedoc", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "hedgedoc", "template": "template0" ******************************************* + Postgresql::Server::Database[keycloak] => parameters => "connect_settings": { }, "dbname": "keycloak", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "keycloak", "template": "template0" ******************************************* + Postgresql::Server::Database[netbox] => parameters => "connect_settings": { }, "dbname": "netbox", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "netbox", "template": "template0" ******************************************* + Postgresql::Server::Database[sentry] => parameters => "connect_settings": { }, "dbname": "sentry", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "sentry", "template": "template0" ******************************************* + Postgresql::Server::Database_grant[GRANT grafana - ALL - grafana] => parameters => "db": "grafana", "privilege": "ALL", "role": "grafana" ******************************************* + Postgresql::Server::Database_grant[GRANT hedgedoc - ALL - hedgedoc] => parameters => "db": "hedgedoc", "privilege": "ALL", "role": "hedgedoc" ******************************************* + Postgresql::Server::Database_grant[GRANT keycloak - ALL - keycloak] => parameters => "db": "keycloak", "privilege": "ALL", "role": "keycloak" ******************************************* + Postgresql::Server::Database_grant[GRANT netbox - ALL - netbox] => parameters => "db": "netbox", "privilege": "ALL", "role": "netbox" ******************************************* + Postgresql::Server::Database_grant[GRANT sentry - ALL - sentry] => parameters => "db": "sentry", "privilege": "ALL", "role": "sentry" ******************************************* + Postgresql::Server::Database_grant[grafana] => parameters => "db": "grafana", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Database_grant[hedgedoc] => parameters => "db": "hedgedoc", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Database_grant[keycloak] => parameters => "db": "keycloak", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Database_grant[netbox] => parameters => "db": "netbox", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Database_grant[sentry] => parameters => "db": "sentry", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Db[grafana] => parameters => "dbname": "grafana", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "grafana", "password": "grafana-db-password", "template": "template0", "user": "grafana" ******************************************* + Postgresql::Server::Db[hedgedoc] => parameters => "dbname": "hedgedoc", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "hedgedoc", "password": "swh-deploy-hedgedoc-db-password", "template": "template0", "user": "hedgedoc" ******************************************* + Postgresql::Server::Db[keycloak] => parameters => "dbname": "keycloak", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "keycloak", "password": "keycloak-postgres-password", "template": "template0", "user": "keycloak" ******************************************* + Postgresql::Server::Db[netbox] => parameters => "dbname": "netbox", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "netbox", "password": "netbox-db-password", "template": "template0", "user": "netbox" ******************************************* + Postgresql::Server::Db[sentry] => parameters => "dbname": "sentry", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "sentry", "password": "sentry-postgres-password", "template": "template0", "user": "sentry" ******************************************* + Postgresql::Server::Grant[database:GRANT grafana - ALL - grafana] => parameters => "connect_settings": { }, "db": "grafana", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "grafana", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "grafana" ******************************************* + Postgresql::Server::Grant[database:GRANT hedgedoc - ALL - hedgedoc] => parameters => "connect_settings": { }, "db": "hedgedoc", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "hedgedoc", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "hedgedoc" ******************************************* + Postgresql::Server::Grant[database:GRANT keycloak - ALL - keycloak] => parameters => "connect_settings": { }, "db": "keycloak", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "keycloak", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "keycloak" ******************************************* + Postgresql::Server::Grant[database:GRANT netbox - ALL - netbox] => parameters => "connect_settings": { }, "db": "netbox", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "netbox", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "netbox" ******************************************* + Postgresql::Server::Grant[database:GRANT sentry - ALL - sentry] => parameters => "connect_settings": { }, "db": "sentry", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "sentry", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "sentry" ******************************************* + Postgresql::Server::Grant[database:grafana] => parameters => "connect_settings": { }, "db": "grafana", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "grafana", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Grant[database:hedgedoc] => parameters => "connect_settings": { }, "db": "hedgedoc", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "hedgedoc", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Grant[database:keycloak] => parameters => "connect_settings": { }, "db": "keycloak", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "keycloak", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Grant[database:netbox] => parameters => "connect_settings": { }, "db": "netbox", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "netbox", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Grant[database:sentry] => parameters => "connect_settings": { }, "db": "sentry", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "sentry", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Pg_hba_rule[allow access to all users] => parameters => "address": "0.0.0.0/0", "auth_method": "md5", "database": "all", "description": "none", "order": 100, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "host", "user": "all" ******************************************* + Postgresql::Server::Pg_hba_rule[allow access to ipv6 localhost] => parameters => "address": "::1/128", "auth_method": "md5", "database": "all", "description": "none", "order": 101, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "host", "user": "all" ******************************************* + Postgresql::Server::Pg_hba_rule[allow localhost TCP access to postgresql user] => parameters => "address": "127.0.0.1/32", "auth_method": "md5", "database": "all", "description": "none", "order": 3, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "host", "user": "postgres" ******************************************* + Postgresql::Server::Pg_hba_rule[local access as postgres user] => parameters => "auth_method": "ident", "database": "all", "description": "none", "order": 1, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "local", "user": "postgres" ******************************************* + Postgresql::Server::Pg_hba_rule[local access to database with same name] => parameters => "auth_method": "ident", "database": "all", "description": "none", "order": 2, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "local", "user": "all" ******************************************* + Postgresql::Server::Pg_hba_rule[postgresql class generated rule ipv4acls 0] => parameters => "address": "192.168.100.0/24", "auth_method": "md5", "database": "all", "description": "none", "order": "010", "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "host", "user": "all" ******************************************* + Postgresql::Server::Role[grafana] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "grafana-db-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "grafana" ******************************************* + Postgresql::Server::Role[guest] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "md5fe4ceeb01d43a6c29d8f4fe93313c6c1", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "guest" ******************************************* + Postgresql::Server::Role[hedgedoc] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "swh-deploy-hedgedoc-db-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "hedgedoc" ******************************************* + Postgresql::Server::Role[keycloak] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "keycloak-postgres-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "keycloak" ******************************************* + Postgresql::Server::Role[netbox] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "netbox-db-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "netbox" ******************************************* + Postgresql::Server::Role[sentry] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "sentry-postgres-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "sentry" ******************************************* + Postgresql_conf[data_directory] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": "/srv/postgresql/14/main" ******************************************* + Postgresql_conf[listen_addresses] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": [ "0.0.0.0" ] ******************************************* + Postgresql_conf[max_connections] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": 100 ******************************************* + Postgresql_conf[port] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": 5432 ******************************************* + Postgresql_conf[shared_preload_libraries] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": "pg_stat_statements" ******************************************* + Postgresql_conn_validator[validate_service_is_running] => parameters => "connect_settings": { }, "db_name": "postgres", "port": 5432, "psql_path": "/usr/bin/psql", "run_as": "postgres", "sleep": 1, "tries": 60 ******************************************* + Postgresql_psql[ALTER DATABASE "grafana" OWNER TO "grafana"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER DATABASE "hedgedoc" OWNER TO "hedgedoc"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER DATABASE "keycloak" OWNER TO "keycloak"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER DATABASE "netbox" OWNER TO "netbox"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER DATABASE "sentry" OWNER TO "sentry"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolconnlimit... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolinherit =... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolcanlogin ... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolcreatedb ... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolcreaterol... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolreplicati... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolsuper = f... ******************************************* + Postgresql_psql[ALTER ROLE "guest" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolconnlimit =... ******************************************* + Postgresql_psql[ALTER ROLE "guest" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolinherit = t... ******************************************* + Postgresql_psql[ALTER ROLE "guest" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolcanlogin = ... ******************************************* + Postgresql_psql[ALTER ROLE "guest" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolcreatedb = ... ******************************************* + Postgresql_psql[ALTER ROLE "guest" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolcreaterole ... ******************************************* + Postgresql_psql[ALTER ROLE "guest" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolreplication... ******************************************* + Postgresql_psql[ALTER ROLE "guest" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolsuper = fal... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolconnlimi... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolinherit ... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolcanlogin... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolcreatedb... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolcreatero... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolreplicat... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolsuper = ... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolconnlimi... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolinherit ... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolcanlogin... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolcreatedb... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolcreatero... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolreplicat... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolsuper = ... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolconnlimit ... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolinherit = ... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolcanlogin =... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolcreatedb =... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolcreaterole... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolreplicatio... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolsuper = fa... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolconnlimit ... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolinherit = ... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolcanlogin =... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolcreatedb =... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolcreaterole... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolreplicatio... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolsuper = fa... ******************************************* + Postgresql_psql[ALTER ROLE grafana ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"grafana\" ENCRYPTED PASSWORD 'grafana-db-password'"... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'grafana' AND passwd = 'm... ******************************************* + Postgresql_psql[ALTER ROLE guest ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"guest\" ENCRYPTED PASSWORD 'md5fe4ceeb01d43a6c29d8f... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'guest' AND passwd = 'md5... ******************************************* + Postgresql_psql[ALTER ROLE hedgedoc ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"hedgedoc\" ENCRYPTED PASSWORD 'swh-deploy-hedgedoc-... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'hedgedoc' AND passwd = '... ******************************************* + Postgresql_psql[ALTER ROLE keycloak ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"keycloak\" ENCRYPTED PASSWORD 'keycloak-postgres-pa... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'keycloak' AND passwd = '... ******************************************* + Postgresql_psql[ALTER ROLE netbox ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"netbox\" ENCRYPTED PASSWORD 'netbox-db-password'", "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'netbox' AND passwd = 'md... ******************************************* + Postgresql_psql[ALTER ROLE sentry ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"sentry\" ENCRYPTED PASSWORD 'sentry-postgres-passwo... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'sentry' AND passwd = 'md... ******************************************* + Postgresql_psql[CREATE DATABASE "grafana"] => parameters => "command": "CREATE DATABASE \"grafana\" WITH TEMPLATE = \"template0\" ENCODI... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"grafana\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'grafana'" ******************************************* + Postgresql_psql[CREATE DATABASE "hedgedoc"] => parameters => "command": "CREATE DATABASE \"hedgedoc\" WITH TEMPLATE = \"template0\" ENCOD... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"hedgedoc\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'hedgedoc'" ******************************************* + Postgresql_psql[CREATE DATABASE "keycloak"] => parameters => "command": "CREATE DATABASE \"keycloak\" WITH TEMPLATE = \"template0\" ENCOD... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"keycloak\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'keycloak'" ******************************************* + Postgresql_psql[CREATE DATABASE "netbox"] => parameters => "command": "CREATE DATABASE \"netbox\" WITH TEMPLATE = \"template0\" ENCODIN... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"netbox\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'netbox'" ******************************************* + Postgresql_psql[CREATE DATABASE "sentry"] => parameters => "command": "CREATE DATABASE \"sentry\" WITH TEMPLATE = \"template0\" ENCODIN... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"sentry\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'sentry'" ******************************************* + Postgresql_psql[CREATE ROLE grafana ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"grafana\" ENCRYPTED PASSWORD 'grafana-db-password'... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana'" ******************************************* + Postgresql_psql[CREATE ROLE guest ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"guest\" ENCRYPTED PASSWORD 'md5fe4ceeb01d43a6c29d8... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest'" ******************************************* + Postgresql_psql[CREATE ROLE hedgedoc ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"hedgedoc\" ENCRYPTED PASSWORD 'swh-deploy-hedgedoc... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc'" ******************************************* + Postgresql_psql[CREATE ROLE keycloak ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"keycloak\" ENCRYPTED PASSWORD 'keycloak-postgres-p... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak'" ******************************************* + Postgresql_psql[CREATE ROLE netbox ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"netbox\" ENCRYPTED PASSWORD 'netbox-db-password' L... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox'" ******************************************* + Postgresql_psql[CREATE ROLE sentry ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"sentry\" ENCRYPTED PASSWORD 'sentry-postgres-passw... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry'" ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "grafana" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "hedgedoc" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "keycloak" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "netbox" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "sentry" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'grafana'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'grafana' AND datistemp... ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'hedgedoc'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'hedgedoc' AND datistem... ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'keycloak'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'keycloak' AND datistem... ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'netbox'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'netbox' AND datistempl... ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'sentry'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'sentry' AND datistempl... ******************************************* + Postgresql_psql[grant:database:GRANT grafana - ALL - grafana] => parameters => "command": "GRANT ALL ON DATABASE \"grafana\" TO \"grafana\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('grafana', 'grafana', 'CREA... ******************************************* + Postgresql_psql[grant:database:GRANT hedgedoc - ALL - hedgedoc] => parameters => "command": "GRANT ALL ON DATABASE \"hedgedoc\" TO \"hedgedoc\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('hedgedoc', 'hedgedoc', 'CR... ******************************************* + Postgresql_psql[grant:database:GRANT keycloak - ALL - keycloak] => parameters => "command": "GRANT ALL ON DATABASE \"keycloak\" TO \"keycloak\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('keycloak', 'keycloak', 'CR... ******************************************* + Postgresql_psql[grant:database:GRANT netbox - ALL - netbox] => parameters => "command": "GRANT ALL ON DATABASE \"netbox\" TO \"netbox\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('netbox', 'netbox', 'CREATE... ******************************************* + Postgresql_psql[grant:database:GRANT sentry - ALL - sentry] => parameters => "command": "GRANT ALL ON DATABASE \"sentry\" TO \"sentry\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('sentry', 'sentry', 'CREATE... ******************************************* + Postgresql_psql[grant:database:grafana] => parameters => "command": "GRANT CONNECT ON DATABASE \"grafana\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'grafana', 'CONNEC... ******************************************* + Postgresql_psql[grant:database:hedgedoc] => parameters => "command": "GRANT CONNECT ON DATABASE \"hedgedoc\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'hedgedoc', 'CONNE... ******************************************* + Postgresql_psql[grant:database:keycloak] => parameters => "command": "GRANT CONNECT ON DATABASE \"keycloak\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'keycloak', 'CONNE... ******************************************* + Postgresql_psql[grant:database:netbox] => parameters => "command": "GRANT CONNECT ON DATABASE \"netbox\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'netbox', 'CONNECT... ******************************************* + Postgresql_psql[grant:database:sentry] => parameters => "command": "GRANT CONNECT ON DATABASE \"sentry\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'sentry', 'CONNECT... ******************************************* + Profile::Cron::D[restart-sql-exporter] => parameters => "command": "chronic systemctl restart prometheus-sql-exporter", "hour": "fqdn_rand/4", "minute": "fqdn_rand", "target": "prometheus", "unique_tag": "restart-sql-exporter", "user": "root" ******************************************* + Profile::Prometheus::Export_scrape_config[sql] => parameters => "job": "sql", "labels": { }, "metric_relabel_configs": [ { "source_labels": [ "__name__", "col" ], "regex": "sql_swh_scheduler_origins;(.*)", "action": "replace", "target_label": "__name__", "replacement": "swh_scheduler_origins_${1}" } ], "target": "192.168.50.50:9237" ******************************************* + Service[postgresqld] => parameters => "enable": true, "ensure": "running", "hasstatus": true, "name": "postgresql", "status": "/usr/sbin/service postgresql@*-main status" ******************************************* + Service[prometheus-sql-exporter] => parameters => "enable": true, "ensure": "running" ******************************************* + Systemd::Dropin_file[prometheus-sql-exporter/restart.conf] => parameters => "content": "[Service]\nRestart=always\nRestartSec=5\n", "daemon_reload": "lazy", "ensure": "present", "filename": "restart.conf", "group": "root", "mode": "0444", "owner": "root", "path": "/etc/systemd/system", "selinux_ignore_defaults": false, "show_diff": true, "unit": "prometheus-sql-exporter.service" ******************************************* + Systemd::Dropin_file[prometheus-sql-exporter/update_config.conf] => parameters => "content": "# File managed by puppet (module profile::prometheus::sql)\n# Ch... "daemon_reload": "lazy", "ensure": "present", "filename": "update_config.conf", "group": "root", "mode": "0444", "notify": "Service[prometheus-sql-exporter]", "owner": "root", "path": "/etc/systemd/system", "selinux_ignore_defaults": false, "show_diff": true, "unit": "prometheus-sql-exporter.service" ******************************************* *** End octocatalog-diff on dali.internal.admin.swh.network ``` [1] T3833#76813

up dali and puppet installs dbs for all the admin services we want with the right encoding and collation [1]: ``` $ vagrant up dali $ vagrant ssh dali; su - postgres; psql -c \l+ List of databases Name | Owner | Encoding | Collate | Ctype | Access privileges | Size | Tablespace | Description -----------+----------+-----------+---------+---------+-----------------------+---------+------------+-------------------------------------------- grafana | grafana | UTF8 | C.UTF-8 | C.UTF-8 | =T/grafana +| 8625 kB | pg_default | | | | | | grafana=CTc/grafana +| | | | | | | | guest=c/grafana | | | hedgedoc | hedgedoc | UTF8 | C.UTF-8 | C.UTF-8 | =T/hedgedoc +| 8625 kB | pg_default | | | | | | hedgedoc=CTc/hedgedoc+| | | | | | | | guest=c/hedgedoc | | | keycloak | keycloak | UTF8 | C.UTF-8 | C.UTF-8 | =T/keycloak +| 8625 kB | pg_default | | | | | | keycloak=CTc/keycloak+| | | | | | | | guest=c/keycloak | | | netbox | netbox | UTF8 | C.UTF-8 | C.UTF-8 | =T/netbox +| 8625 kB | pg_default | | | | | | netbox=CTc/netbox +| | | | | | | | guest=c/netbox | | | postgres | postgres | SQL_ASCII | C | C | | 8833 kB | pg_default | default administrative connection database sentry | sentry | UTF8 | C.UTF-8 | C.UTF-8 | =T/sentry +| 8625 kB | pg_default | | | | | | sentry=CTc/sentry +| | | | | | | | guest=c/sentry | | | template0 | postgres | SQL_ASCII | C | C | =c/postgres +| 8625 kB | pg_default | unmodifiable empty database | | | | | postgres=CTc/postgres | | | template1 | postgres | SQL_ASCII | C | C | =c/postgres +| 8777 kB | pg_default | default template for new databases | | | | | postgres=CTc/postgres | | | ``` octo-diff happy: ``` bin/octocatalog-diff --to staging dali Found host dali.internal.admin.swh.network WARN -> Environment "staging-add-prometheus-metrics" contained non-word characters, correcting name to staging_add_prometheus_metrics WARN -> Environment "staging-bullseye-rabbitmq-plugin" contained non-word characters, correcting name to staging_bullseye_rabbitmq_plugin WARN -> Environment "staging-check-journal-client" contained non-word characters, correcting name to staging_check_journal_client WARN -> Environment "staging-check-journal-client-2nd-implementation" contained non-word characters, correcting name to staging_check_journal_client_2nd_implementation WARN -> Environment "staging-check-journal-client-first-implem" contained non-word characters, correcting name to staging_check_journal_client_first_implem WARN -> Environment "staging-pin" contained non-word characters, correcting name to staging_pin Cloning into '/tmp/swh-ocd.dS8pQicw/environments/production/data/private'... done. Cloning into '/tmp/swh-ocd.dS8pQicw/environments/staging/data/private'... done. *** Running octocatalog-diff on host dali.internal.admin.swh.network I, [2022-01-13T12:05:21.697358 #69053] INFO -- : Catalogs compiled for dali.internal.admin.swh.network I, [2022-01-13T12:05:22.161920 #69053] INFO -- : Diffs computed for dali.internal.admin.swh.network diff origin/production/dali.internal.admin.swh.network current/dali.internal.admin.swh.network ******************************************* + Anchor[apt_key B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8 present] ******************************************* + Anchor[postgresql::server::service::begin] ******************************************* + Anchor[postgresql::server::service::end] ******************************************* + Apt::Key[Add key: B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8 from Apt::Source pgdg] => parameters => "content": "-----BEGIN PGP PUBLIC KEY BLOCK-----\n\nmQINBE6XR8IBEACVdDKT2HEH... "ensure": "present", "id": "B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8", "server": "keyserver.ubuntu.com", "weak_ssl": false ******************************************* + Apt::Setting[list-pgdg] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n# pgdg\ndeb http... "ensure": "present", "notify_update": true, "priority": 50 ******************************************* + Apt::Setting[list-pglogical] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n# pglogical\ndeb... "ensure": "absent", "notify_update": true, "priority": 50 ******************************************* + Apt::Source[pgdg] => parameters => "allow_unsigned": false, "comment": "pgdg", "ensure": "present", "include": { }, "key": { "id": "B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8", "content": "-----BEGIN PGP PUBLIC KEY BLOCK-----\n\nmQINBE6XR8IBEACVdDKT2H... }, "location": "https://apt.postgresql.org/pub/repos/apt/", "notify_update": true, "release": "bullseye-pgdg", "repos": "main" ******************************************* + Apt::Source[pglogical] => parameters => "allow_unsigned": false, "comment": "pglogical", "ensure": "absent", "include": { }, "notify_update": true, "repos": "main" ******************************************* + Apt_key[Add key: B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8 from Apt::Source pgdg] => parameters => "content": "-----BEGIN PGP PUBLIC KEY BLOCK-----\n\nmQINBE6XR8IBEACVdDKT2HEH... "ensure": "present", "id": "B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8", "refresh": false, "server": "keyserver.ubuntu.com", "weak_ssl": false ******************************************* + Concat::Fragment[pg_hba_rule_allow access to all users] => parameters => "content": "\n# Rule Name: allow access to all users\n# Description: none\n#... "order": "100", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_allow access to ipv6 localhost] => parameters => "content": "\n# Rule Name: allow access to ipv6 localhost\n# Description: no... "order": "101", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_allow localhost TCP access to postgresql user] => parameters => "content": "\n# Rule Name: allow localhost TCP access to postgresql user\n# ... "order": "003", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_local access as postgres user] => parameters => "content": "\n# Rule Name: local access as postgres user\n# Description: non... "order": "001", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_local access to database with same name] => parameters => "content": "\n# Rule Name: local access to database with same name\n# Descri... "order": "002", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat::Fragment[pg_hba_rule_postgresql class generated rule ipv4acls 0] => parameters => "content": "\n# Rule Name: postgresql class generated rule ipv4acls 0\n# Des... "order": "010", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat[/etc/postgresql/14/main/pg_hba.conf] => parameters => "backup": "puppet", "ensure": "present", "ensure_newline": false, "force": false, "format": "plain", "group": "postgres", "mode": "0640", "notify": "Class[Postgresql::Server::Reload]", "order": "alpha", "owner": "postgres", "path": "/etc/postgresql/14/main/pg_hba.conf", "replace": true, "show_diff": true, "warn": true ******************************************* + Concat[/etc/postgresql/14/main/pg_ident.conf] => parameters => "backup": "puppet", "ensure": "present", "ensure_newline": false, "force": false, "format": "plain", "group": "postgres", "mode": "0640", "notify": "Class[Postgresql::Server::Reload]", "order": "alpha", "owner": "postgres", "path": "/etc/postgresql/14/main/pg_ident.conf", "replace": true, "show_diff": true, "warn": true ******************************************* + Concat_file[/etc/postgresql/14/main/pg_hba.conf] => parameters => "backup": "puppet", "ensure_newline": false, "force": false, "format": "plain", "group": "postgres", "mode": "0640", "order": "alpha", "owner": "postgres", "replace": true, "show_diff": true, "tag": "_etc_postgresql_14_main_pg_hba.conf" ******************************************* + Concat_file[/etc/postgresql/14/main/pg_ident.conf] => parameters => "backup": "puppet", "ensure_newline": false, "force": false, "format": "plain", "group": "postgres", "mode": "0640", "order": "alpha", "owner": "postgres", "replace": true, "show_diff": true, "tag": "_etc_postgresql_14_main_pg_ident.conf" ******************************************* + Concat_fragment[/etc/postgresql/14/main/pg_hba.conf_header] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n", "order": "0", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[/etc/postgresql/14/main/pg_ident.conf_header] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n", "order": "0", "tag": "_etc_postgresql_14_main_pg_ident.conf", "target": "/etc/postgresql/14/main/pg_ident.conf" ******************************************* + Concat_fragment[pg_hba_rule_allow access to all users] => parameters => "content": "\n# Rule Name: allow access to all users\n# Description: none\n#... "order": "100", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_allow access to ipv6 localhost] => parameters => "content": "\n# Rule Name: allow access to ipv6 localhost\n# Description: no... "order": "101", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_allow localhost TCP access to postgresql user] => parameters => "content": "\n# Rule Name: allow localhost TCP access to postgresql user\n# ... "order": "003", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_local access as postgres user] => parameters => "content": "\n# Rule Name: local access as postgres user\n# Description: non... "order": "001", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_local access to database with same name] => parameters => "content": "\n# Rule Name: local access to database with same name\n# Descri... "order": "002", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[pg_hba_rule_postgresql class generated rule ipv4acls 0] => parameters => "content": "\n# Rule Name: postgresql class generated rule ipv4acls 0\n# Des... "order": "010", "tag": "_etc_postgresql_14_main_pg_hba.conf", "target": "/etc/postgresql/14/main/pg_hba.conf" ******************************************* + Concat_fragment[profile::cron::restart-sql-exporter] => parameters => "content": "# Cron snippet restart-sql-exporter\n26 0-20/4 * * * root chroni... "order": "10", "tag": "profile::cron::prometheus", "target": "profile::cron::prometheus" ******************************************* + Exec[postgresql_initdb] => parameters => "command": "/usr/lib/postgresql/14/bin/initdb --pgdata '/srv/postgresql/14/m... "creates": "/srv/postgresql/14/main/PG_VERSION", "cwd": "/tmp", "group": "postgres", "logoutput": "on_failure", "user": "postgres" ******************************************* + Exec[postgresql_reload] => parameters => "command": "service postgresql reload", "onlyif": "/usr/sbin/service postgresql@*-main status", "path": "/usr/bin:/usr/sbin:/bin:/sbin", "refreshonly": true ******************************************* + Exec[postgresql_stop_data_directory] => parameters => "command": "service postgresql stop", "logoutput": "on_failure", "onlyif": "service postgresql status", "path": "/usr/sbin:/sbin:/bin:/usr/bin:/usr/local/bin", "unless": "grep \"data_directory = '/srv/postgresql/14/main'\" /etc/postgres... ******************************************* + Exec[sed -e /dar\./d -e /swh-dar-backup/d -i /var/spool/cron/crontabs/root] => parameters => "onlyif": "grep -q swh-dar-backup /var/spool/cron/crontabs/root", "path": [ "/sbin", "/usr/sbin", "/bin", "/usr/bin" ] ******************************************* + Exec[set_postgres_postgrespw] => parameters => "command": "/usr/bin/psql -c \"ALTER ROLE \\\"postgres\\\" PASSWORD ${NEWPAS... "cwd": "/tmp", "environment": [ "PGPASSWORD=swh-deploy-db-postgres-password", "PGPORT=5432", "NEWPASSWD_ESCAPED=$$swh-deploy-db-postgres-password$$" ], "group": "postgres", "logoutput": true, "path": "/usr/bin:/usr/local/bin:/bin", "unless": "/usr/bin/psql -h localhost -p 5432 -c 'select 1' > /dev/null", "user": "postgres" ******************************************* + Exec[ssh-keygen -t ed25519 -f /root/.ssh/id_ed25519.borg -N ''] => parameters => "creates": "/root/.ssh/id_ed25519.borg", "path": [ "/bin", "/usr/bin" ] ******************************************* + File[/etc/apt/sources.list.d/pgdg.list] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n# pgdg\ndeb http... "ensure": "present", "group": "root", "notify": "Class[Apt::Update]", "owner": "root" ******************************************* + File[/etc/apt/sources.list.d/pglogical.list] => parameters => "content": "# This file is managed by Puppet. DO NOT EDIT.\n# pglogical\ndeb... "ensure": "absent", "group": "root", "notify": "Class[Apt::Update]", "owner": "root" ******************************************* + File[/etc/borgmatic/config.yaml] => parameters => "content": "# File managed by puppet - modifications will be lost\nlocation:... "ensure": "present", "group": "root", "mode": "0600", "owner": "root" ******************************************* + File[/etc/borgmatic] => parameters => "ensure": "directory", "group": "root", "mode": "0600", "owner": "root" ******************************************* + File[/etc/default/prometheus-sql-exporter] => parameters => "content": "# File managed by puppet (module profile::prometheus::sql)\n# Ch... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/logrotate.d/swh-dar] => parameters => "ensure": "absent" ******************************************* + File[/etc/postgresql/14/main/postgresql.conf] => parameters => "ensure": "file", "group": "postgres", "mode": "0644", "owner": "postgres" ******************************************* + File[/etc/prometheus-sql-exporter/activity.yml] => parameters => "content": "# queries run once per cluster (via the 'postgres' database)\n\n... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/prometheus-sql-exporter/queries.yml] => parameters => "content": "# queries run once per cluster (via the 'postgres' database)\n\n... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/prometheus-sql-exporter/replication.yml] => parameters => "content": "# queries run once per cluster (via the 'postgres' database)\n\n... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/prometheus-sql-exporter/wal.yml] => parameters => "content": "# queries run once per cluster (via the 'postgres' database)\n\n... "ensure": "present", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/prometheus-sql-exporter] => parameters => "ensure": "directory", "group": "root", "mode": "0644", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/etc/systemd/system/prometheus-sql-exporter.service.d/restart.conf] => parameters => "content": "[Service]\nRestart=always\nRestartSec=5\n", "ensure": "file", "group": "root", "mode": "0444", "notify": [ "Class[Systemd::Systemctl::Daemon_reload]" ], "owner": "root", "selinux_ignore_defaults": false, "show_diff": true ******************************************* + File[/etc/systemd/system/prometheus-sql-exporter.service.d/update_config.conf] => parameters => "content": "# File managed by puppet (module profile::prometheus::sql)\n# Ch... "ensure": "file", "group": "root", "mode": "0444", "notify": [ "Class[Systemd::Systemctl::Daemon_reload]" ], "owner": "root", "selinux_ignore_defaults": false, "show_diff": true ******************************************* + File[/etc/systemd/system/prometheus-sql-exporter.service.d] => parameters => "ensure": "directory", "group": "root", "owner": "root", "purge": true, "recurse": true, "selinux_ignore_defaults": false ******************************************* + File[/srv/backups] => parameters => "ensure": "absent", "force": true, "purge": true, "recurse": true ******************************************* + File[/srv/postgresql/14/main] => parameters => "ensure": "directory", "group": "postgres", "mode": "0700", "owner": "postgres" ******************************************* + File[/srv/postgresql/14] => parameters => "ensure": "directory", "group": "root", "mode": "0655", "owner": "root" ******************************************* + File[/srv/postgresql] => parameters => "ensure": "directory", "group": "root", "mode": "0655", "owner": "root" ******************************************* + File[/usr/bin/update-prometheus-sql-exporter-config] => parameters => "content": "#!/usr/bin/perl\n\nuse strict;\nuse warnings;\nuse PgCommon;\nus... "ensure": "present", "group": "root", "mode": "0755", "notify": "Service[prometheus-sql-exporter]", "owner": "root" ******************************************* + File[/usr/local/bin/swh-dar-backup] => parameters => "ensure": "absent" ******************************************* + File[/var/lib/borg] => parameters => "ensure": "directory", "group": "root", "mode": "0600", "owner": "root" ******************************************* + File[/var/log/dar] => parameters => "ensure": "absent", "force": true, "purge": true, "recurse": true ******************************************* + Node[dali.internal.admin.swh.network] ******************************************* - Node[default] ******************************************* + Package[borgbackup] => parameters => "ensure": "installed" ******************************************* + Package[borgmatic] => parameters => "ensure": "installed" ******************************************* + Package[libyaml-perl] => parameters => "ensure": "installed" ******************************************* + Package[postgresql-client-common] => parameters => "ensure": "installed" ******************************************* + Package[postgresql-server] => parameters => "ensure": "present", "name": "postgresql-14", "tag": "puppetlabs-postgresql" ******************************************* + Package[prometheus-sql-exporter] => parameters => "ensure": "installed" ******************************************* + Postgresql::Server::Config_entry[data_directory] => parameters => "ensure": "present", "path": false, "value": "/srv/postgresql/14/main" ******************************************* + Postgresql::Server::Config_entry[listen_addresses] => parameters => "ensure": "present", "path": false, "value": [ "0.0.0.0" ] ******************************************* + Postgresql::Server::Config_entry[max_connections] => parameters => "ensure": "present", "path": false, "value": 100 ******************************************* + Postgresql::Server::Config_entry[port] => parameters => "ensure": "present", "path": false, "value": 5432 ******************************************* + Postgresql::Server::Config_entry[shared_preload_libraries] => parameters => "ensure": "present", "path": false, "value": "pg_stat_statements" ******************************************* + Postgresql::Server::Database[grafana] => parameters => "connect_settings": { }, "dbname": "grafana", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "grafana", "template": "template0" ******************************************* + Postgresql::Server::Database[hedgedoc] => parameters => "connect_settings": { }, "dbname": "hedgedoc", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "hedgedoc", "template": "template0" ******************************************* + Postgresql::Server::Database[keycloak] => parameters => "connect_settings": { }, "dbname": "keycloak", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "keycloak", "template": "template0" ******************************************* + Postgresql::Server::Database[netbox] => parameters => "connect_settings": { }, "dbname": "netbox", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "netbox", "template": "template0" ******************************************* + Postgresql::Server::Database[sentry] => parameters => "connect_settings": { }, "dbname": "sentry", "encoding": "UTF8", "istemplate": false, "locale": "C.UTF-8", "owner": "sentry", "template": "template0" ******************************************* + Postgresql::Server::Database_grant[GRANT grafana - ALL - grafana] => parameters => "db": "grafana", "privilege": "ALL", "role": "grafana" ******************************************* + Postgresql::Server::Database_grant[GRANT hedgedoc - ALL - hedgedoc] => parameters => "db": "hedgedoc", "privilege": "ALL", "role": "hedgedoc" ******************************************* + Postgresql::Server::Database_grant[GRANT keycloak - ALL - keycloak] => parameters => "db": "keycloak", "privilege": "ALL", "role": "keycloak" ******************************************* + Postgresql::Server::Database_grant[GRANT netbox - ALL - netbox] => parameters => "db": "netbox", "privilege": "ALL", "role": "netbox" ******************************************* + Postgresql::Server::Database_grant[GRANT sentry - ALL - sentry] => parameters => "db": "sentry", "privilege": "ALL", "role": "sentry" ******************************************* + Postgresql::Server::Database_grant[grafana] => parameters => "db": "grafana", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Database_grant[hedgedoc] => parameters => "db": "hedgedoc", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Database_grant[keycloak] => parameters => "db": "keycloak", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Database_grant[netbox] => parameters => "db": "netbox", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Database_grant[sentry] => parameters => "db": "sentry", "privilege": "connect", "role": "guest" ******************************************* + Postgresql::Server::Db[grafana] => parameters => "dbname": "grafana", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "grafana", "password": "grafana-db-password", "template": "template0", "user": "grafana" ******************************************* + Postgresql::Server::Db[hedgedoc] => parameters => "dbname": "hedgedoc", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "hedgedoc", "password": "swh-deploy-hedgedoc-db-password", "template": "template0", "user": "hedgedoc" ******************************************* + Postgresql::Server::Db[keycloak] => parameters => "dbname": "keycloak", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "keycloak", "password": "keycloak-postgres-password", "template": "template0", "user": "keycloak" ******************************************* + Postgresql::Server::Db[netbox] => parameters => "dbname": "netbox", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "netbox", "password": "netbox-db-password", "template": "template0", "user": "netbox" ******************************************* + Postgresql::Server::Db[sentry] => parameters => "dbname": "sentry", "encoding": "UTF8", "grant": "ALL", "istemplate": false, "locale": "C.UTF-8", "owner": "sentry", "password": "sentry-postgres-password", "template": "template0", "user": "sentry" ******************************************* + Postgresql::Server::Grant[database:GRANT grafana - ALL - grafana] => parameters => "connect_settings": { }, "db": "grafana", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "grafana", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "grafana" ******************************************* + Postgresql::Server::Grant[database:GRANT hedgedoc - ALL - hedgedoc] => parameters => "connect_settings": { }, "db": "hedgedoc", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "hedgedoc", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "hedgedoc" ******************************************* + Postgresql::Server::Grant[database:GRANT keycloak - ALL - keycloak] => parameters => "connect_settings": { }, "db": "keycloak", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "keycloak", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "keycloak" ******************************************* + Postgresql::Server::Grant[database:GRANT netbox - ALL - netbox] => parameters => "connect_settings": { }, "db": "netbox", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "netbox", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "netbox" ******************************************* + Postgresql::Server::Grant[database:GRANT sentry - ALL - sentry] => parameters => "connect_settings": { }, "db": "sentry", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "sentry", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "ALL", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "sentry" ******************************************* + Postgresql::Server::Grant[database:grafana] => parameters => "connect_settings": { }, "db": "grafana", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "grafana", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Grant[database:hedgedoc] => parameters => "connect_settings": { }, "db": "hedgedoc", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "hedgedoc", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Grant[database:keycloak] => parameters => "connect_settings": { }, "db": "keycloak", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "keycloak", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Grant[database:netbox] => parameters => "connect_settings": { }, "db": "netbox", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "netbox", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Grant[database:sentry] => parameters => "connect_settings": { }, "db": "sentry", "ensure": "present", "group": "postgres", "object_arguments": [ ], "object_name": "sentry", "object_type": "DATABASE", "onlyif_exists": false, "port": 5432, "privilege": "connect", "psql_db": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "role": "guest" ******************************************* + Postgresql::Server::Pg_hba_rule[allow access to all users] => parameters => "address": "0.0.0.0/0", "auth_method": "md5", "database": "all", "description": "none", "order": 100, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "host", "user": "all" ******************************************* + Postgresql::Server::Pg_hba_rule[allow access to ipv6 localhost] => parameters => "address": "::1/128", "auth_method": "md5", "database": "all", "description": "none", "order": 101, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "host", "user": "all" ******************************************* + Postgresql::Server::Pg_hba_rule[allow localhost TCP access to postgresql user] => parameters => "address": "127.0.0.1/32", "auth_method": "md5", "database": "all", "description": "none", "order": 3, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "host", "user": "postgres" ******************************************* + Postgresql::Server::Pg_hba_rule[local access as postgres user] => parameters => "auth_method": "ident", "database": "all", "description": "none", "order": 1, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "local", "user": "postgres" ******************************************* + Postgresql::Server::Pg_hba_rule[local access to database with same name] => parameters => "auth_method": "ident", "database": "all", "description": "none", "order": 2, "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "local", "user": "all" ******************************************* + Postgresql::Server::Pg_hba_rule[postgresql class generated rule ipv4acls 0] => parameters => "address": "192.168.100.0/24", "auth_method": "md5", "database": "all", "description": "none", "order": "010", "postgresql_version": "14", "target": "/etc/postgresql/14/main/pg_hba.conf", "type": "host", "user": "all" ******************************************* + Postgresql::Server::Role[grafana] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "grafana-db-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "grafana" ******************************************* + Postgresql::Server::Role[guest] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "md5fe4ceeb01d43a6c29d8f4fe93313c6c1", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "guest" ******************************************* + Postgresql::Server::Role[hedgedoc] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "swh-deploy-hedgedoc-db-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "hedgedoc" ******************************************* + Postgresql::Server::Role[keycloak] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "keycloak-postgres-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "keycloak" ******************************************* + Postgresql::Server::Role[netbox] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "netbox-db-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "netbox" ******************************************* + Postgresql::Server::Role[sentry] => parameters => "connect_settings": { }, "connection_limit": "-1", "createdb": false, "createrole": false, "db": "postgres", "ensure": "present", "inherit": true, "login": true, "module_workdir": "/tmp", "password_hash": "sentry-postgres-password", "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "replication": false, "superuser": false, "update_password": true, "username": "sentry" ******************************************* + Postgresql_conf[data_directory] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": "/srv/postgresql/14/main" ******************************************* + Postgresql_conf[listen_addresses] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": [ "0.0.0.0" ] ******************************************* + Postgresql_conf[max_connections] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": 100 ******************************************* + Postgresql_conf[port] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": 5432 ******************************************* + Postgresql_conf[shared_preload_libraries] => parameters => "ensure": "present", "notify": "Class[Postgresql::Server::Service]", "target": "/etc/postgresql/14/main/postgresql.conf", "value": "pg_stat_statements" ******************************************* + Postgresql_conn_validator[validate_service_is_running] => parameters => "connect_settings": { }, "db_name": "postgres", "port": 5432, "psql_path": "/usr/bin/psql", "run_as": "postgres", "sleep": 1, "tries": 60 ******************************************* + Postgresql_psql[ALTER DATABASE "grafana" OWNER TO "grafana"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER DATABASE "hedgedoc" OWNER TO "hedgedoc"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER DATABASE "keycloak" OWNER TO "keycloak"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER DATABASE "netbox" OWNER TO "netbox"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER DATABASE "sentry" OWNER TO "sentry"] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database JOIN pg_roles rol ON datdba = rol.oid W... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolconnlimit... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolinherit =... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolcanlogin ... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolcreatedb ... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolcreaterol... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolreplicati... ******************************************* + Postgresql_psql[ALTER ROLE "grafana" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana' AND rolsuper = f... ******************************************* + Postgresql_psql[ALTER ROLE "guest" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolconnlimit =... ******************************************* + Postgresql_psql[ALTER ROLE "guest" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolinherit = t... ******************************************* + Postgresql_psql[ALTER ROLE "guest" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolcanlogin = ... ******************************************* + Postgresql_psql[ALTER ROLE "guest" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolcreatedb = ... ******************************************* + Postgresql_psql[ALTER ROLE "guest" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolcreaterole ... ******************************************* + Postgresql_psql[ALTER ROLE "guest" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolreplication... ******************************************* + Postgresql_psql[ALTER ROLE "guest" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest' AND rolsuper = fal... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolconnlimi... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolinherit ... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolcanlogin... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolcreatedb... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolcreatero... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolreplicat... ******************************************* + Postgresql_psql[ALTER ROLE "hedgedoc" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc' AND rolsuper = ... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolconnlimi... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolinherit ... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolcanlogin... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolcreatedb... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolcreatero... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolreplicat... ******************************************* + Postgresql_psql[ALTER ROLE "keycloak" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak' AND rolsuper = ... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolconnlimit ... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolinherit = ... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolcanlogin =... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolcreatedb =... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolcreaterole... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolreplicatio... ******************************************* + Postgresql_psql[ALTER ROLE "netbox" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox' AND rolsuper = fa... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" CONNECTION LIMIT -1] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolconnlimit ... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" INHERIT] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolinherit = ... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" LOGIN] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolcanlogin =... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" NOCREATEDB] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolcreatedb =... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" NOCREATEROLE] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolcreaterole... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" NOREPLICATION] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolreplicatio... ******************************************* + Postgresql_psql[ALTER ROLE "sentry" NOSUPERUSER] => parameters => "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry' AND rolsuper = fa... ******************************************* + Postgresql_psql[ALTER ROLE grafana ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"grafana\" ENCRYPTED PASSWORD 'grafana-db-password'"... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'grafana' AND passwd = 'm... ******************************************* + Postgresql_psql[ALTER ROLE guest ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"guest\" ENCRYPTED PASSWORD 'md5fe4ceeb01d43a6c29d8f... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'guest' AND passwd = 'md5... ******************************************* + Postgresql_psql[ALTER ROLE hedgedoc ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"hedgedoc\" ENCRYPTED PASSWORD 'swh-deploy-hedgedoc-... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'hedgedoc' AND passwd = '... ******************************************* + Postgresql_psql[ALTER ROLE keycloak ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"keycloak\" ENCRYPTED PASSWORD 'keycloak-postgres-pa... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'keycloak' AND passwd = '... ******************************************* + Postgresql_psql[ALTER ROLE netbox ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"netbox\" ENCRYPTED PASSWORD 'netbox-db-password'", "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'netbox' AND passwd = 'md... ******************************************* + Postgresql_psql[ALTER ROLE sentry ENCRYPTED PASSWORD ****] => parameters => "command": "ALTER ROLE \"sentry\" ENCRYPTED PASSWORD 'sentry-postgres-passwo... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_shadow WHERE usename = 'sentry' AND passwd = 'md... ******************************************* + Postgresql_psql[CREATE DATABASE "grafana"] => parameters => "command": "CREATE DATABASE \"grafana\" WITH TEMPLATE = \"template0\" ENCODI... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"grafana\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'grafana'" ******************************************* + Postgresql_psql[CREATE DATABASE "hedgedoc"] => parameters => "command": "CREATE DATABASE \"hedgedoc\" WITH TEMPLATE = \"template0\" ENCOD... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"hedgedoc\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'hedgedoc'" ******************************************* + Postgresql_psql[CREATE DATABASE "keycloak"] => parameters => "command": "CREATE DATABASE \"keycloak\" WITH TEMPLATE = \"template0\" ENCOD... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"keycloak\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'keycloak'" ******************************************* + Postgresql_psql[CREATE DATABASE "netbox"] => parameters => "command": "CREATE DATABASE \"netbox\" WITH TEMPLATE = \"template0\" ENCODIN... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"netbox\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'netbox'" ******************************************* + Postgresql_psql[CREATE DATABASE "sentry"] => parameters => "command": "CREATE DATABASE \"sentry\" WITH TEMPLATE = \"template0\" ENCODIN... "connect_settings": { }, "db": "postgres", "notify": [ "Postgresql_psql[REVOKE CONNECT ON DATABASE \"sentry\" FROM public]" ], "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'sentry'" ******************************************* + Postgresql_psql[CREATE ROLE grafana ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"grafana\" ENCRYPTED PASSWORD 'grafana-db-password'... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'grafana'" ******************************************* + Postgresql_psql[CREATE ROLE guest ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"guest\" ENCRYPTED PASSWORD 'md5fe4ceeb01d43a6c29d8... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'guest'" ******************************************* + Postgresql_psql[CREATE ROLE hedgedoc ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"hedgedoc\" ENCRYPTED PASSWORD 'swh-deploy-hedgedoc... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'hedgedoc'" ******************************************* + Postgresql_psql[CREATE ROLE keycloak ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"keycloak\" ENCRYPTED PASSWORD 'keycloak-postgres-p... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'keycloak'" ******************************************* + Postgresql_psql[CREATE ROLE netbox ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"netbox\" ENCRYPTED PASSWORD 'netbox-db-password' L... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'netbox'" ******************************************* + Postgresql_psql[CREATE ROLE sentry ENCRYPTED PASSWORD ****] => parameters => "command": "CREATE ROLE \"sentry\" ENCRYPTED PASSWORD 'sentry-postgres-passw... "connect_settings": { }, "cwd": "/tmp", "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "sensitive": true, "unless": "SELECT 1 FROM pg_roles WHERE rolname = 'sentry'" ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "grafana" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "hedgedoc" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "keycloak" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "netbox" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[REVOKE CONNECT ON DATABASE "sentry" FROM public] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "refreshonly": true ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'grafana'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'grafana' AND datistemp... ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'hedgedoc'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'hedgedoc' AND datistem... ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'keycloak'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'keycloak' AND datistem... ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'netbox'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'netbox' AND datistempl... ******************************************* + Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'sentry'] => parameters => "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 FROM pg_database WHERE datname = 'sentry' AND datistempl... ******************************************* + Postgresql_psql[grant:database:GRANT grafana - ALL - grafana] => parameters => "command": "GRANT ALL ON DATABASE \"grafana\" TO \"grafana\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('grafana', 'grafana', 'CREA... ******************************************* + Postgresql_psql[grant:database:GRANT hedgedoc - ALL - hedgedoc] => parameters => "command": "GRANT ALL ON DATABASE \"hedgedoc\" TO \"hedgedoc\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('hedgedoc', 'hedgedoc', 'CR... ******************************************* + Postgresql_psql[grant:database:GRANT keycloak - ALL - keycloak] => parameters => "command": "GRANT ALL ON DATABASE \"keycloak\" TO \"keycloak\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('keycloak', 'keycloak', 'CR... ******************************************* + Postgresql_psql[grant:database:GRANT netbox - ALL - netbox] => parameters => "command": "GRANT ALL ON DATABASE \"netbox\" TO \"netbox\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('netbox', 'netbox', 'CREATE... ******************************************* + Postgresql_psql[grant:database:GRANT sentry - ALL - sentry] => parameters => "command": "GRANT ALL ON DATABASE \"sentry\" TO \"sentry\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('sentry', 'sentry', 'CREATE... ******************************************* + Postgresql_psql[grant:database:grafana] => parameters => "command": "GRANT CONNECT ON DATABASE \"grafana\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'grafana', 'CONNEC... ******************************************* + Postgresql_psql[grant:database:hedgedoc] => parameters => "command": "GRANT CONNECT ON DATABASE \"hedgedoc\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'hedgedoc', 'CONNE... ******************************************* + Postgresql_psql[grant:database:keycloak] => parameters => "command": "GRANT CONNECT ON DATABASE \"keycloak\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'keycloak', 'CONNE... ******************************************* + Postgresql_psql[grant:database:netbox] => parameters => "command": "GRANT CONNECT ON DATABASE \"netbox\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'netbox', 'CONNECT... ******************************************* + Postgresql_psql[grant:database:sentry] => parameters => "command": "GRANT CONNECT ON DATABASE \"sentry\" TO \"guest\"", "connect_settings": { }, "db": "postgres", "port": 5432, "psql_group": "postgres", "psql_path": "/usr/bin/psql", "psql_user": "postgres", "unless": "SELECT 1 WHERE has_database_privilege('guest', 'sentry', 'CONNECT... ******************************************* + Profile::Cron::D[restart-sql-exporter] => parameters => "command": "chronic systemctl restart prometheus-sql-exporter", "hour": "fqdn_rand/4", "minute": "fqdn_rand", "target": "prometheus", "unique_tag": "restart-sql-exporter", "user": "root" ******************************************* + Profile::Prometheus::Export_scrape_config[sql] => parameters => "job": "sql", "labels": { }, "metric_relabel_configs": [ { "source_labels": [ "__name__", "col" ], "regex": "sql_swh_scheduler_origins;(.*)", "action": "replace", "target_label": "__name__", "replacement": "swh_scheduler_origins_${1}" } ], "target": "192.168.50.50:9237" ******************************************* + Service[postgresqld] => parameters => "enable": true, "ensure": "running", "hasstatus": true, "name": "postgresql", "status": "/usr/sbin/service postgresql@*-main status" ******************************************* + Service[prometheus-sql-exporter] => parameters => "enable": true, "ensure": "running" ******************************************* + Systemd::Dropin_file[prometheus-sql-exporter/restart.conf] => parameters => "content": "[Service]\nRestart=always\nRestartSec=5\n", "daemon_reload": "lazy", "ensure": "present", "filename": "restart.conf", "group": "root", "mode": "0444", "owner": "root", "path": "/etc/systemd/system", "selinux_ignore_defaults": false, "show_diff": true, "unit": "prometheus-sql-exporter.service" ******************************************* + Systemd::Dropin_file[prometheus-sql-exporter/update_config.conf] => parameters => "content": "# File managed by puppet (module profile::prometheus::sql)\n# Ch... "daemon_reload": "lazy", "ensure": "present", "filename": "update_config.conf", "group": "root", "mode": "0444", "notify": "Service[prometheus-sql-exporter]", "owner": "root", "path": "/etc/systemd/system", "selinux_ignore_defaults": false, "show_diff": true, "unit": "prometheus-sql-exporter.service" ******************************************* *** End octocatalog-diff on dali.internal.admin.swh.network ``` [1] T3833#76813