Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Sébastien Luttringer
infrastructure
Commits
b1503b03
Commit
b1503b03
authored
Jun 07, 2018
by
Florian Pritz
Browse files
Improve group vars vault usage for patchwork
Signed-off-by:
Florian Pritz
<
bluewind@xinu.at
>
parent
9812145d
Changes
3
Hide whitespace changes
Inline
Side-by-side
group_vars/all/vault_patchwork.yml
View file @
b1503b03
$ANSIBLE_VAULT;1.1;AES256
6
662636364336666
36633
8
63663
36438363763316164
3431333
13465313938653636356238333537
646264396134353238666432
656
3
663
13638
653
5
36
3
33
0
30
0a396537393131303234323233363261
3033376439303735633937336136616135
656
16
2333
8656136333265663134366337336462393130
3
26331363934
6633
3
7
0a37
62
3437
63396364303432333531633464646439636165313832
64
6
5323
1
3
166623730623031
36306
5636638303762333635393264646134636433
66303
2396
537653
0323831
3
13933323364336332343136396165616234663233666
43
5
633
26
361
64636165376166613265
3131
33
3339653933613538
303
7
376
339303439373139393237343536663932306537356437323
63231
61
63623764306135356538633
43
8
30
6231373661653362336536373163306338386530353362323131
3
03162373663626530653937
343
8
323
534633535336265643032316534646665
62
6
53
63132646231
613
839313534376335616530326630356239343265353366303661363039656635643
53
7
32
393964
3
535363435383937633764373937626362356437303735336132623561343661313031
356
6
39
6138
63393139396663
646
5
62
3066643036376165353434366230396435386237653464323932613461
36
636
3
6
4653630653033
3663363
7
663
93731
343
06
13
0
33
3366636164306562613364656663616530373935
36396164
656663
6235
65336
138
3330
3833366362363764390a663562383132343331363238663030
6432356661326133633562306366
656
43
2333
6393832643335323337303239396437633266333362
3
4616666383036
66330a373437
363662613665356431363465613762633430
64
3
5323
76439393163
3
8646163383
36
1
306
13737623432393838323537393230663061306230
66303537653
63036613764
3
735396530366333373766343732363036643163393466373
43
4
633361
3136313666333966
313
66
1
6
33
7656264326164
303
5
376
261316662383461313733313933323638613738336232646
63231
3462
38343630326
43
9
30
3764393164326565343261656536363934356664656637373433376664316236
3
266303830663037386633
343
6
323
237616632336132323233393662393862
62
3
53
8356331663837
613
635666237643862643862393239653762633931363133613838386332393936336
53
6
32
653863
3
03432663463343934303964633032363062333631363734623735653362363163
356
2
39
39343236
33303631323831303636323935313034343334
646
1
62
6136336337313333633638376262393962
36
636
66466616634333833633330346332343431626535343435343738353233623434
roles/patchwork/tasks/main.yml
View file @
b1503b03
...
...
@@ -46,8 +46,8 @@
postgresql_user
:
name={{ item.user }} password={{ item.password }} login_host="{{ patchwork_db_host }}" login_password="{{ vault_postgres_users.postgres }}" encrypted=yes
no_log
:
true
with_items
:
-
{
user
:
"
{{
patchwork_db_user
}}"
,
password
:
"
{{
patchwork_db_password
}}"
}
-
{
user
:
"
{{
patchwork_db_backup_user
}}"
,
password
:
"
{{
patchwork_db_backup_password
}}"
}
-
{
user
:
"
{{
patchwork_db_user
}}"
,
password
:
"
{{
vault_
patchwork_db_password
}}"
}
-
{
user
:
"
{{
patchwork_db_backup_user
}}"
,
password
:
"
{{
vault_
patchwork_db_backup_password
}}"
}
-
name
:
create patchwork db
postgresql_db
:
name="{{ patchwork_db }}" login_host="{{ patchwork_db_host }}" login_password="{{ vault_postgres_users.postgres }}" owner="{{ patchwork_db_user }}"
...
...
@@ -60,19 +60,19 @@
when
:
(db_created.changed or release.changed or config.changed or virtualenv.changed or patchwork_forced_deploy)
-
name
:
db privileges for patchwork users
postgresql_privs
:
database="{{ patchwork_db }}" host="{{ patchwork_db_host }}" login="{{ patchwork_db_user }}" password="{{ patchwork_db_password }}"
postgresql_privs
:
database="{{ patchwork_db }}" host="{{ patchwork_db_host }}" login="{{ patchwork_db_user }}" password="{{
vault_
patchwork_db_password }}"
privs=CONNECT roles="{{ item }}" type=database
with_items
:
-
"
{{
patchwork_db_backup_user
}}"
-
name
:
table privileges for patchwork users
postgresql_privs
:
database="{{ patchwork_db }}" host="{{ patchwork_db_host }}" login="{{ patchwork_db_user }}" password="{{ patchwork_db_password }}"
postgresql_privs
:
database="{{ patchwork_db }}" host="{{ patchwork_db_host }}" login="{{ patchwork_db_user }}" password="{{
vault_
patchwork_db_password }}"
privs=SELECT roles="{{ item.user }}" type=table objs="{{ item.objs }}"
with_items
:
-
{
user
:
"
{{
patchwork_db_backup_user
}}"
,
objs
:
"
{{
patchwork_db_backup_table_objs
}}"
}
-
name
:
sequence privileges for patchwork users
postgresql_privs
:
database="{{ patchwork_db }}" host="{{ patchwork_db_host }}" login="{{ patchwork_db_user }}" password="{{ patchwork_db_password }}"
postgresql_privs
:
database="{{ patchwork_db }}" host="{{ patchwork_db_host }}" login="{{ patchwork_db_user }}" password="{{
vault_
patchwork_db_password }}"
privs=SELECT roles="{{ item.user }}" type=sequence objs="{{ item.objs }}"
with_items
:
-
{
user
:
"
{{
patchwork_db_backup_user
}}"
,
objs
:
"
{{
patchwork_db_backup_sequence_objs
}}"
}
...
...
roles/patchwork/templates/production.py.j2
View file @
b1503b03
...
...
@@ -27,7 +27,7 @@ from .base import * # noqa
# chars = string.letters + string.digits + string.punctuation
# print repr("".join([random.choice(chars) for i in range(0,50)]))
SECRET_KEY = '{{ patchwork_secret_key }}'
SECRET_KEY = '{{
vault_
patchwork_secret_key }}'
# Email
#
...
...
@@ -64,7 +64,7 @@ DATABASES = {
'ENGINE': 'django.db.backends.postgresql_psycopg2',
'NAME': '{{ patchwork_db }}',
'USER': '{{ patchwork_db_user }}',
'PASSWORD': '{{ patchwork_db_password }}',
'PASSWORD': '{{
vault_
patchwork_db_password }}',
'HOST': '{{ patchwork_db_host }}',
'PORT': 5432,
},
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment