integ/config/puppet-modules/openstack
Jorge Saffe 1146d5f296 Dynamize Postgres Auth Method Definition
The 8.0.0 version of the 'puppetlabs-postgresql'
module uses 'md5' as the default authentication
method. This value is hardcoded, making it impossible
to set dynamically during bootstrap. The newest
versions of 'puppetlabs-postgresql' have added a new
parameter to set the authorization method dynamically.

The proposed solution patches the current version
using the same parameter name as in the newer versions
to dynamically set the authorization method. This also
allows a future update of the 'puppetlabs-postgresql'
module to be done seamlessly.

Test Plan:
- PASS Fresh Install SX env
   * Verify system status unlock/available

   * Login as admin user in psql
     (psql -U admin -h 127.0.0.1 -d sysinv)
   * Check postgres authorization configuration
     (SELECT * from pg_hba_file_rules;)
   * Check postgres password encryption configuration
     (SELECT rolname, rolpassword
      FROM pg_authid WHERE rolpassword IS NOT NULL;).

- PASS Fresh Install DX env
   * Verify system status unlock/available

   * Login as admin user in psql
     (psql -U admin -h 127.0.0.1 -d sysinv)
   * Check postgres authorization configuration
     (SELECT * from pg_hba_file_rules;)
   * Check postgres password encryption configuration
     (SELECT rolname, rolpassword
      FROM pg_authid WHERE rolpassword IS NOT NULL;).

   * Host swact to controller-1

   * Login as admin user in psql
     (psql -U admin -h 127.0.0.1 -d sysinv)
   * Check postgres authorization configuration
     (SELECT * from pg_hba_file_rules;)
   * Check postgres password encryption configuration
     (SELECT rolname, rolpassword
      FROM pg_authid WHERE rolpassword IS NOT NULL;).

   * collect logs (collect)
   * verify '/var/extra/database/' content

- PASS Fresh Install DC env
   * Verify system status unlock/available
   * Check postgres authorization configuration
     (SELECT * from pg_hba_file_rules;)
   * Check postgres password encryption configuration
     (SELECT rolname, rolpassword
      FROM pg_authid WHERE rolpassword IS NOT NULL;).

- PASS Upgrade SX
- PASS Upgrade SX-rollback
- PASS Upgrade DX
- PASS Upgrade DX-rollback

Partial-bug: 2069842

Change-Id: I74fff1715bf362fe5f7952bf2175984dc6a68f68
Signed-off-by: Jorge Saffe <jorge.saffe@windriver.com>
2024-09-26 20:04:41 +02:00
..
puppet-ceph-2.4.1/debian Adds support for 3 monitors on AIO-DX 2024-07-29 17:42:29 -03:00
puppet-horizon-17.4.0/debian Add puppet-memcached with FQDN support 2023-11-01 15:19:13 -03:00
puppet-keystone-17.4.0/debian Fix hiera_lookup unescape special characters. 2023-05-26 04:25:05 +00:00
puppet-openstacklib-17.4.0/debian Dynamize Postgres Auth Method Definition 2024-09-26 20:04:41 +02:00
puppet-oslo-17.4.0/debian Debian: Replace deprecated idle_timeout parm on keystone 2022-03-18 00:58:57 -03:00