From 87bb031ed00b7993a29d74aee2e89875c5444caf Mon Sep 17 00:00:00 2001 From: Alex Auvolat Date: Sun, 25 Dec 2022 22:31:18 +0100 Subject: Migrate prod cluster secrets to new format --- cluster/prod/app/postgres/secrets.toml | 10 ++++++++++ cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_pwd | 1 - .../prod/app/postgres/secrets/postgres/keeper/pg_repl_username | 1 - cluster/prod/app/postgres/secrets/postgres/keeper/pg_su_pwd | 1 - 4 files changed, 10 insertions(+), 3 deletions(-) create mode 100644 cluster/prod/app/postgres/secrets.toml delete mode 100644 cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_pwd delete mode 100644 cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_username delete mode 100644 cluster/prod/app/postgres/secrets/postgres/keeper/pg_su_pwd (limited to 'cluster/prod/app/postgres') diff --git a/cluster/prod/app/postgres/secrets.toml b/cluster/prod/app/postgres/secrets.toml new file mode 100644 index 0000000..537a72d --- /dev/null +++ b/cluster/prod/app/postgres/secrets.toml @@ -0,0 +1,10 @@ +[service_users."replicator"] +password_secret = "postgres/keeper/pg_repl_pwd" +username_secret = "postgres/keeper/pg_repl_username" + + +[secrets."postgres/keeper/pg_su_pwd"] +type = 'command' +command = 'openssl rand -base64 15' +description = 'postgres superuser password' + diff --git a/cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_pwd b/cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_pwd deleted file mode 100644 index ae0c229..0000000 --- a/cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_pwd +++ /dev/null @@ -1 +0,0 @@ -SERVICE_PASSWORD replicator diff --git a/cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_username b/cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_username deleted file mode 100644 index 58e6e46..0000000 --- a/cluster/prod/app/postgres/secrets/postgres/keeper/pg_repl_username +++ /dev/null @@ -1 +0,0 @@ -CONST replicator diff --git a/cluster/prod/app/postgres/secrets/postgres/keeper/pg_su_pwd b/cluster/prod/app/postgres/secrets/postgres/keeper/pg_su_pwd deleted file mode 100644 index 907e2b8..0000000 --- a/cluster/prod/app/postgres/secrets/postgres/keeper/pg_su_pwd +++ /dev/null @@ -1 +0,0 @@ -USER postgres superuser password -- cgit v1.2.3