kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 30 Pull Requests 3 Projects 2 Activity

Use our own fork of the postgresql cookbook

Browse Source
This commit is contained in:
Basti 2020-06-07 12:29:06 +02:00
parent bd99b76287
commit 4fe0e913f8
No known key found for this signature in database
GPG Key ID: BE4634D632D39B67
25 changed files with 5 additions and 1645 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.gitmodules vendored Normal file
View File

@ -0,0 +1,3 @@
[submodule "site-cookbooks/postgresql"]
path = site-cookbooks/postgresql
url = git@github.com:67P/postgresql.git

2
Berksfile
View File

@ -30,7 +30,7 @@ cookbook 'nginx', '= 9.0.0'
# part of Chef 14 (https://docs.chef.io/resource_build_essential.html)
cookbook 'build-essential', '~> 8.2.1'
cookbook 'mysql', '~> 8.5.1'
cookbook 'postgresql', '= 7.1.8'
# cookbook 'postgresql', '= 7.1.8'
cookbook 'apt', '~> 7.0.0'
cookbook 'git', '= 6.0.0'
cookbook 'hostsfile', '= 2.4.5'

2
Berksfile.lock
View File

@ -44,7 +44,6 @@ DEPENDENCIES
poise-ruby-build (~> 1.1.0)
poise-service (~> 1.5.2)
postfix (= 5.0.2)
postgresql (= 7.1.8)
redis
git: https://github.com/phlipper/chef-redis.git
revision: 7476279fc9c8727f082b8d77b5e1922dc2ef437b
@ -154,7 +153,6 @@ GRAPH
poise-service (1.5.2)
poise (~> 2.0)
postfix (5.0.2)
postgresql (7.1.8)
redis (0.5.6)
apt (>= 0.0.0)
seven_zip (3.1.1)

171
cookbooks/postgresql/CHANGELOG.md
View File

@ -1,171 +0,0 @@
# postgresql Cookbook CHANGELOG
This file is used to list changes made in the last 3 major versions of the postgresql cookbook.
## v7.1.8 (2020-02-22)
- Fix incorrect ubuntu platform family value in `postgresql_server_install`
- Re-add unit tests that were skipped
## v7.1.7 (2020-02-21)
- Correctly configure postgres-common on Ubuntu hosts (fixes #596)
## v7.1.6 (2020-02-20)
- Remove unnecessary nil default in resource properties
- Migrate to GitHub Actions for testing
## v7.1.5 (2019-11-18)
- Allow to install extensions with hyphens, ex: `postgresql_extension '"uuid-ossp"'`
- Update Circle CI config to match sous-chefs defaults #617
- Remove Fedora testing from CI, not an official supported OS by sous-chefs, PR welcome #617
## v7.1.4 (2019-03-28)
- Fix installation of extensions.
## v7.1.3 (2019-01-15)
- Added support for dash in database role name.
## v7.1.2 (2019-06-01)
- Cleanup and update the user resource documentation and code. Removed extraneous 'sensitive' property which is a common property in all Chef resources.
- Change default permissions on the postgres.conf to be world readable so that psql can work.
## v7.1.1 (2018-09-26)
- Rename slave to follower
- Use CircleCI for testing
- Simplyfy extension resource
## v7.1.0 (2018-06-22)
- Update the `initdb` script to use initdb rather than a service. #542
- Refactor database commands to use the common connect method. #535
- Increase the unit test coverage.
## v7.0.0 (2018-05-25)
_Breaking Change_ Please see UPGRADING.md and the README.md for information how to use.
- Add custom resources for:
- `postgresql_client_install`
- `postgresql_server_install`
- `postgresql_repository`
- `postgresql_pg_gem`
- Deprecate recipes:
- `apt_pgdg_postgresql`
- `config_initdb`
- `config_pgtune`
- `contrib`
- `ruby`
- `yum_pgdg_postgresql`
- Remove deprecated tests
## v6.1.3 (2018-04-18)
- Fix recipes referencing the old helpers
## v6.1.2 (2018-04-16)
this will be the last release of the 6.0 series before all recipes are removed from the cookbook
- Deprecate all recipes
## v6.1.1 (2017-03-08)
- Fix pg gem installation on non-omnibus chef runs
- Resolve resource cloning deprecation warnings in the ruby recipe
- Fix issues resolving the timezone on CentOS 7 and probably other distros
- Test with Delivery local instead of Rake
## v6.1.0 (2017-02-18)
- Fix a method name conflict that caused errors if Chef Sugar was also being used on the run list
- Revert a previous PR that added support for Postgresql 9.6 as it introduced incorrect configuration values
- Added Fedora 25 support for pgdg packages
- Added RHEL 5 support for Postgresql 9.4 pgdg packages
- Removed testing for RHEL 5 and Ubuntu 12.04 as they are scheduled for EoL in the near future
- Improvements to Test Kitchen testing to allow more extensive testing in Travis CI
- Fixed the client recipe on Fedora
- Added Inspec tests for client installs
## v6.0.1 (2017-01-04
- Fix systemd unit file template
## v6.0.0 (2017-01-03)
- This cookbook now requires Chef 12.1 or later
- Removed the dependency on the apt cookbook as this functionality is built into modern chef client releases
- Added a new custom resource for installing extensions. This acts as a replacement for the contrib recipe with minimal backwards compatibility. You can now install / remove extensions into any database. This adds the compat_resource cookbook dependency so we can continue to support Chef 12.1-12.4, which lack custom resource support.
- The unused get_result_orig helper has been removed. If you utilized this you'll want to move it to your own wrapper cookbook
- Updates for compatibility with Postgresql 9.5 and 9.6
- Fixed client package installation on openSUSE Leap 42.2
- ca-certificates recipe has been deprecated. If ca-certificates package needs to be upgraded the user should do so prior to including this recipe. Package upgrades in community cookbooks are generally a bad idea as this bring in updated packages to production systems. The recipe currently warns if used and will be removed with the next major cookbook release.
- Fixed RHEL platform detection in the Ruby recipe
- systemd fixes for RHEL systems
- Fix systemd service file include when using pgdg packages
- Package installation now uses multi-package installs to speed up converge times
- Added integration testing in Travis of the client recipe using a new test cookbook. This will be expanded in the future to cover server installation as well
- Expanded the specs to test converges on multiple platforms
## v5.2.0 (2016-12-30)
- Updated contacts and links to point to Sous Chefs now
- Added a Code of Conduct (the Chef CoC)
- Removed duplicate platforms in the metadata
- Fix Chef runs with local mode in the server recipe
- Fix the ruby recipe to not fail when you specify enabling both the apt and yum repos for mixed distro environments
- Set the postgresql data directory to 700 permissions
- Added node['postgresql']['pg_gem']['version'] to specify the version of the pg gem to install
- Cookstyle fixes for the latest cookstyle release
- Removed test deps from the Gemfile. Rely on ChefDK for base testing deps instead
## v5.1.0 (2016-11-01)
- Maintenance of this cookbook has been migrated from Heavy Water to Sous Chefs - <https://sous-chefs.org/>
- Add support for Chef-Zero (local mode)
- Don't hardcode the UID / GID on RHEL/Amazon/Suse platforms
- Add PGDG yum RPMs for 9.5 / 9.6
## v5.0.0 (2016-10-25)
### Breaking changes
- Switched from Librarian to Berkshelf
- Remove support for the following platforms
- SLES < 12
- openSUSE < 13
- Debian < 7
- Ubuntu < 12.04
- RHEL < 6
- Amazon < 2013
- Unsupported (EOL) Fedora releases
### Other changes
- Added support for Ubuntu 16.04
- Loosened cookbook dependencies to not prevent pulling in the latest community cookbooks
- Added chef_version metadata
- Switched from rubocop to cookstyle and fix all warnings
- Removed minitests and the minitest handler
- Added support for opensuse / opensuseleap
- Added support for Fedora 23/24
- Added a chefignore file to limit the files uploaded to the chef server
- Updated Test Kitchen config to test on modern platform releases
- Added a Rakefile and updated Travis to test with ChefDK and that rakefile
- Avoid installing packages included in build-essential twice in the ruby recipe
- Require at least build-essential 2.0
- Don't cleanup the old PPA files in the apt_pgdg_postgresql recipe anymore. These should be long gone everywhere
- Remove logic in the apt_pgdg_postgresql recipe that made Chef fail when new distro releases came out
- Avoid node.set deprecation warnings
- Avoid managed_home deprecation warnings in server_redhat recipe

21
cookbooks/postgresql/CONTRIBUTING.md
View File

@ -1,21 +0,0 @@
# Contributing
## Branches
### `master` branch
The master branch is the current committed changes. These changes may not yet be released although we try to release often.
## Tags
All releases are tagged in git. To see the releases available to you see the changelog or the tags directly.
## Pull requests
- <https://github.com/sous-chefs/postgresql/pulls>
## Issues
Need to report an issue? Use the github issues:
- <https://github.com/sous-chefs/postgresql/issues>

431
cookbooks/postgresql/README.md
View File

@ -1,431 +0,0 @@
# PostgreSQL cookbook
[![Cookbook Version](https://img.shields.io/cookbook/v/postgresql.svg)](https://supermarket.chef.io/cookbooks/postgresql)
[![Build Status](https://img.shields.io/circleci/project/github/sous-chefs/postgresql/master.svg)](https://circleci.com/gh/sous-chefs/postgresql)
[![OpenCollective](https://opencollective.com/sous-chefs/backers/badge.svg)](#backers)
[![OpenCollective](https://opencollective.com/sous-chefs/sponsors/badge.svg)](#sponsors)
[![License](https://img.shields.io/badge/License-Apache%202.0-green.svg)](https://opensource.org/licenses/Apache-2.0)
Installs and configures PostgreSQL as a client or a server.
## Maintainers
This cookbook is maintained by the Sous Chefs. The Sous Chefs are a community of Chef cookbook maintainers working together to maintain important cookbooks. If you’d like to know more please visit [sous-chefs.org](https://sous-chefs.org/) or come chat with us on the Chef Community Slack in [#sous-chefs](https://chefcommunity.slack.com/messages/C2V7B88SF).
## Upgrading
If you are wondering where all the recipes went in v7.0+, or how on earth I use this new cookbook please see upgrading.md for a full description.
## Requirements
### Platforms
- Amazon Linux
- Debian 7+
- Ubuntu 14.04+
- Red Hat/CentOS/Scientific 6+
### PostgreSQL version
We follow the currently supported versions listed on <https://www.postgresql.org/support/versioning/>
### Chef
- Chef 13.8+
### Cookbook Dependencies
None.
## Resources
### postgresql_client_install
This resource installs PostgreSQL client packages.
#### Actions
- `install` - (default) Install client packages
#### Properties
Name | Types | Description | Default | Required?
------------------- | ----------------- | ------------------------------------------------------------- | ----------------------------------------- | ---------
`version` | String | Version of PostgreSQL to install | '9.6' | no
`setup_repo` | Boolean | Define if you want to add the PostgreSQL repo | true | no
`hba_file` | String | | `#{conf_dir}/main/pg_hba.conf` | no
`ident_file` | String | | `#{conf_dir}/main/pg_ident.conf` | no
`external_pid_file` | String | | `/var/run/postgresql/#{version}-main.pid` | no
`password` | String, nil | Pass in a password, or have the cookbook generate one for you | random string | no
#### Examples
To install version 9.5:
```ruby
postgresql_client_install 'My PostgreSQL Client install' do
version '9.5'
end
```
### postgresql_server_install
This resource installs PostgreSQL client and server packages.
#### Actions
- `install` - (default) Install client and server packages
- `create` - Initialize the database
#### Properties
Name | Types | Description | Default | Required?
------------------- | --------------- | --------------------------------------------- | -------------------------------------------------- | ---------
`version` | String | Version of PostgreSQL to install | '9.6' | no
`setup_repo` | Boolean | Define if you want to add the PostgreSQL repo | true | no
`hba_file` | String | Path of pg_hba.conf file | `<default_os_path>/pg_hba.conf'` | no
`ident_file` | String | Path of pg_ident.conf file | `<default_os_path>/pg_ident.conf` | no
`external_pid_file` | String | Path of PID file | `/var/run/postgresql/<version>-main.pid</version>` | no
`password` | String, nil | Set PostgreSQL user password | 'generate' | no
`port` | Integer | Set listen port of PostgreSQL service | 5432 | no
`initdb_locale` | String | Locale to initialise the database with | 'C' | no
#### Examples
To install PostgreSQL server, set your own postgres password using non-default service port.
```ruby
postgresql_server_install 'My PostgreSQL Server install' do
action :install
end
postgresql_server_install 'Setup my PostgreSQL 9.6 server' do
password 'MyP4ssw0rd'
port 5433
action :create
end
```
#### Known issues
On some platforms (e.g. Ubuntu 18.04), your `initdb_locale` should be set to the
same as the template database [GH-555](https://github.com/sous-chefs/postgresql/issues/555).
### postgresql_server_conf
This resource manages postgresql.conf configuration file.
#### Actions
- `modify` - (default) Manager PostgreSQL configuration file (postgresql.conf)
#### Properties
Name | Types | Description | Default | Required?
---------------------- | ------- | --------------------------------------- | --------------------------------------------------- | ---------
`version` | String | Version of PostgreSQL to install | '9.6' | no
`data_directory` | String | Path of PostgreSQL data directory | `<default_os_data_path>` | no
`hba_file` | String | Path of pg_hba.conf file | `<default_os_conf_path>/pg_hba.conf` | no
`ident_file` | String | Path of pg_ident.conf file | `<default_os_conf_path>/pg_ident.conf` | no
`external_pid_file` | String | Path of PID file | `/var/run/postgresql/<postgresql_version>-main.pid` | no
`stats_temp_directory` | String | Path of stats file | `/var/run/postgresql/version>-main.pg_stat_tmp` | no
`port` | Integer | Set listen port of PostgreSQL service | 5432 | no
`additional_config` | Hash | Extra configuration for the config file | {} | no
#### Examples
To setup your PostgreSQL configuration with a specific data directory. If you have installed a specific version of PostgreSQL (different from 9.6), you must specify version in this resource too.
```ruby
postgresql_server_conf 'My PostgreSQL Config' do
version '9.5'
data_directory '/data/postgresql/9.5/main'
notifies :reload, 'service[postgresql]'
end
```
### postgresql_extension
This resource manages PostgreSQL extensions for a given database.
#### Actions
- `create` - (default) Creates an extension in a given database
- `drop` - Drops an extension from the database
#### Properties
Name | Types | Description | Default | Required?
------------- | ------ | -------------------------------------------------------------------------------- | ---------------- | ---------
`database` | String | Name of the database to install the extension into | | yes
`extension` | String | Name of the extension to install the database | Name of resource | yes
`version` | String | Version of the extension to install | | no
`old_version` | String | Older module name for new extension replacement. Appends FROM to extension query | | no
#### Examples
To install the `adminpack` extension:
```ruby
# Add the contrib package in Ubuntu/Debian
package 'postgresql-contrib-9.6'
# Install adminpack extension
postgresql_extension 'postgres adminpack' do
database 'postgres'
extension 'adminpack'
end
```
### postgresql_access
This resource uses the accumulator pattern to build up the `pg_hba.conf` file via chef resources instead of piling on a mountain of chef attributes to make this cookbook more reusable. It directly mirrors the configuration options of the postgres hba file in the resource and by default notifies the server with a reload to avoid a full restart, causing a potential outage of service. To revoke access, simply remove the resource and the access change won't be computed into the final `pg_hba.conf`
#### Actions
- `grant` - (default) Creates an access line inside of `pg_hba.conf`
#### Properties
Name | Types | Description | Default | Required?
--------------- | ------ | ----------------------------------------------------------------------------------------- | ----------------- | ---------
`name` | String | Name of the access resource, this is left as a comment inside the `pg_hba` config | Resource name | yes
`source` | String | The cookbook template filename if you want to use your own custom template | 'pg_hba.conf.erb' | yes
`cookbook` | String | The cookbook to look in for the template source | 'postgresql' | yes
`comment` | String | A comment to leave above the entry in `pg_hba` | nil | no
`access_type` | String | The type of access, e.g. local or host | 'local' | yes
`access_db` | String | The database to access. Can use 'all' for all databases | 'all' | yes
`access_user` | String | The user accessing the database. Can use 'all' for any user | 'all' | yes
`access_addr` | String | The address(es) allowed access. Can be nil if method ident is used since it is local then | nil | no
`access_method` | String | Authentication method to use | 'ident' | yes
#### Examples
To grant access to the PostgreSQL user with ident authentication:
```ruby
postgresql_access 'local_postgres_superuser' do
comment 'Local postgres superuser access'
access_type 'local'
access_db 'all'
access_user 'postgres'
access_addr nil
access_method 'ident'
end
```
This generates the following line in the `pg_hba.conf`:
```config
# Local postgres superuser access
local all postgres ident
```
**Note**: The template by default generates a local access for Unix domain sockets only to support running the SQL execute resources. In Postgres version 9.1 and higher, the method is 'peer' instead of 'ident' which is identical. It looks like this:
```config
# "local" is for Unix domain socket connections only
local all all peer
```
### postgresql_ident
This resource generate `pg_ident.conf` configuration file to manage user mapping between system and PostgreSQL users.
#### Actions
- `create` - (default) Creates an mapping line inside of `pg_ident.conf`
#### Properties
Name | Types | Description | Default | Required?
-------------- | ----------- | -------------------------------------------------------------------------- | ------------------- | ---------
`mapname` | String | Name of the user mapping | Resource name | yes
`source` | String | The cookbook template filename if you want to use your own custom template | 'pg_ident.conf.erb' | no
`cookbook` | String | The cookbook to look in for the template source | 'postgresql' | no
`comment` | String, nil | A comment to leave above the entry in `pg_ident` | nil | no
`system_user` | String | System user or regexp used for the mapping | None | yes
`pg_user` | String | Pg user or regexp used for the mapping | None | yes
#### Examples
Creates a `mymapping` mapping that map `john` system user to `user1` PostgreSQL user:
```ruby
postgresql_ident 'Map john to user1' do
comment 'John Mapping'
mapname 'mymapping'
system_user 'john'
pg_user 'user1'
end
```
This generates the following line in the `pg_ident.conf`:
```config
# MAPNAME SYSTEM-USERNAME PG-USERNAME
# John Mapping
mymapping john user1
```
To grant access to the foo user with password authentication:
```ruby
postgresql_access 'local_foo_user' do
comment 'Foo user access'
access_type 'host'
access_db 'all'
access_user 'foo'
access_addr '127.0.0.1/32'
access_method 'md5'
end
```
This generates the following line in the `pg_hba.conf`:
```config
# Local postgres superuser access
host all foo 127.0.0.1/32 ident
```
### postgresql_database
This resource manages PostgreSQL databases.
#### Actions
- `create` - (default) Creates the given database.
- `drop` - Drops the given database.
#### Properties
Name | Types | Description | Default | Required?
---------- | ------- | ------------------------------------------------------------------- | ------------------- | ---------
`database` | String | Name of the database to create | Resource name | yes
`user` | String | User which run psql command | 'postgres' | no
`template` | String | Template used to create the new database | 'template1' | no
`host` | String | Define the host server where the database creation will be executed | Not set (localhost) | no
`port` | Integer | Define the port of PostgreSQL server | 5432 | no
`encoding` | String | Define database encoding | 'UTF-8' | no
`locale` | String | Define database locale | 'en_US.UTF-8' | no
`owner` | String | Define the owner of the database | Not set | no
#### Examples
To create database named 'my_app' with owner 'user1':
```ruby
postgresql_database 'my_app' do
owner 'user1'
end
```
#### Known issues
On some platforms (e.g. Ubuntu 18.04), your `initdb_locale` should be set to the
same as the template database [GH-555](https://github.com/sous-chefs/postgresql/issues/555).
### postgresql_user
This resource manage PostgreSQL users.
#### Actions
- `create` - (default) Creates the given user with default or given privileges.
- `update` - Update user privilieges.
- `drop` - Deletes the given user.
#### Properties
Name | Types | Description | Default | Required?
-------------------- | ------- | ----------------------------------------------- | -------- | ---------
`create_user` | String | User to create (defaults to the resource name) | | Yes
`superuser` | Boolean | Define if user needs superuser role | false | no
`createdb` | Boolean | Define if user needs createdb role | false | no
`createrole` | Boolean | Define if user needs createrole role | false | no
`inherit` | Boolean | Define if user inherits the privileges of roles | true | no
`replication` | Boolean | Define if user needs replication role | false | no
`login` | Boolean | Define if user can login | true | no
`password` | String | Set user's password | | no
`encrypted_password` | String | Set user's password with an hashed password | | no
`valid_until` | String | Define an account expiration date | | no
`attributes` | Hash | Additional attributes for :update action | {} | no
`user` | String | User for command | postgres | no
`database` | String | Database for command | | no
`host` | String | Hostname for command | | no
`port` | Integer | Port number to connect to postgres | 5432 | no
#### Examples
Create a user `user1` with a password, with `createdb` role and set an expiration date to 2018, Dec 21.
```ruby
postgresql_user 'user1' do
password 'UserP4ssword'
createdb true
valid_until '2018-12-31'
end
```
Create a user `user1` with a password, with `createdb` role and set an expiration date to 2018, Dec 21.
```ruby
postgresql_user 'user1' do
password 'UserP4ssword'
createdb true
valid_until '2018-12-31'
end
```
## Usage
To install and configure your PostgreSQL instance you need to create your own cookbook and call needed resources with your own parameters.
More examples can be found in `test/cookbooks/test/recipes`
## Example Usage
```ruby
# cookbooks/my_postgresql/recipes/default.rb
postgresql_client_install 'PostgreSQL Client' do
setup_repo false
version '10.6'
end
postgresql_server_install 'PostgreSQL Server' do
version '10.6'
setup_repo false
password 'P0stgresP4ssword'
end
postgresql_server_conf 'PostgreSQL Config' do
notifies :reload, 'service[postgresql]'
end
```
## Contributors
This project exists thanks to all the people who [contribute.](https://opencollective.com/sous-chefs/contributors.svg?width=890&button=false)
### Backers
Thank you to all our backers!
![https://opencollective.com/sous-chefs#backers](https://opencollective.com/sous-chefs/backers.svg?width=600&avatarHeight=40)
### Sponsors
Support this project by becoming a sponsor. Your logo will show up here with a link to your website.
![https://opencollective.com/sous-chefs/sponsor/0/website](https://opencollective.com/sous-chefs/sponsor/0/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/1/website](https://opencollective.com/sous-chefs/sponsor/1/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/2/website](https://opencollective.com/sous-chefs/sponsor/2/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/3/website](https://opencollective.com/sous-chefs/sponsor/3/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/4/website](https://opencollective.com/sous-chefs/sponsor/4/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/5/website](https://opencollective.com/sous-chefs/sponsor/5/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/6/website](https://opencollective.com/sous-chefs/sponsor/6/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/7/website](https://opencollective.com/sous-chefs/sponsor/7/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/8/website](https://opencollective.com/sous-chefs/sponsor/8/avatar.svg?avatarHeight=100)
![https://opencollective.com/sous-chefs/sponsor/9/website](https://opencollective.com/sous-chefs/sponsor/9/avatar.svg?avatarHeight=100)

254
cookbooks/postgresql/libraries/helpers.rb
View File

@ -1,254 +0,0 @@
#
# Cookbook:: postgresql
# Library:: helpers
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
module PostgresqlCookbook
module Helpers
include Chef::Mixin::ShellOut
require 'securerandom'
def psql_command_string(new_resource, query, grep_for: nil, value_only: false)
cmd = %(/usr/bin/psql -c "#{query}")
cmd << " -d #{new_resource.database}" if new_resource.database
cmd << " -U #{new_resource.user}" if new_resource.user
cmd << " --host #{new_resource.host}" if new_resource.host
cmd << " --port #{new_resource.port}" if new_resource.port
cmd << ' --tuples-only' if value_only
cmd << " | grep #{grep_for}" if grep_for
cmd
end
def execute_sql(new_resource, query)
# If we don't pass in a user to the resource
# default to the postgres user
user = new_resource.user || 'postgres'
# Query could be a String or an Array of Strings
statement = query.is_a?(String) ? query : query.join("\n")
cmd = shell_out(statement, user: user, environment: psql_environment)
# Pass back cmd so we can decide what to do with it in the calling method.
cmd
end
def database_exists?(new_resource)
sql = %(SELECT datname from pg_database WHERE datname='#{new_resource.database}')
exists = psql_command_string(new_resource, sql, grep_for: new_resource.database)
cmd = execute_sql(new_resource, exists)
cmd.exitstatus == 0
end
def user_exists?(new_resource)
sql = %(SELECT rolname FROM pg_roles WHERE rolname='#{new_resource.create_user}';)
exists = psql_command_string(new_resource, sql, grep_for: new_resource.create_user)
cmd = execute_sql(new_resource, exists)
cmd.exitstatus == 0
end
def extension_installed?(new_resource)
query = %(SELECT extversion FROM pg_extension WHERE extname='#{new_resource.extension}';)
check_extension_version = psql_command_string(new_resource, query, value_only: true)
version_result = execute_sql(new_resource, check_extension_version)
if new_resource.version
version_result.stdout == new_resource.version
else
!version_result.stdout.chomp.empty?
end
end
def alter_role_sql(new_resource)
sql = %(ALTER ROLE postgres ENCRYPTED PASSWORD '#{postgres_password(new_resource)}';)
psql_command_string(new_resource, sql)
end
def create_extension_sql(new_resource)
sql = %(CREATE EXTENSION IF NOT EXISTS #{new_resource.extension})
sql << " FROM \"#{new_resource.old_version}\"" if new_resource.old_version
psql_command_string(new_resource, sql)
end
def user_has_password?(new_resource)
sql = %(SELECT rolpassword from pg_authid WHERE rolname='postgres' AND rolpassword IS NOT NULL;)
cmd = psql_command_string(new_resource, sql)
res = execute_sql(new_resource, cmd)
res.stdout =~ /1 row/ ? true : false
end
def role_sql(new_resource)
sql = %(\\"#{new_resource.create_user}\\" WITH )
%w(superuser createdb createrole inherit replication login).each do |perm|
sql << "#{'NO' unless new_resource.send(perm)}#{perm.upcase} "
end
sql << if new_resource.encrypted_password
"ENCRYPTED PASSWORD '#{new_resource.encrypted_password}'"
elsif new_resource.password
"PASSWORD '#{new_resource.password}'"
else
''
end
sql << if new_resource.valid_until
" VALID UNTIL '#{new_resource.valid_until}'"
else
''
end
end
def create_user_sql(new_resource)
sql = %(CREATE ROLE #{role_sql(new_resource)})
psql_command_string(new_resource, sql)
end
def update_user_sql(new_resource)
sql = %(ALTER ROLE #{role_sql(new_resource)})
psql_command_string(new_resource, sql)
end
def update_user_with_attributes_sql(new_resource, value)
sql = %(ALTER ROLE '#{new_resource.create_user}' SET #{attr} = #{value})
psql_command_string(new_resource, sql)
end
def drop_user_sql(new_resource)
sql = %(DROP ROLE IF EXISTS '#{new_resource.create_user}')
psql_command_string(new_resource, sql)
end
def data_dir(version = node.run_state['postgresql']['version'])
case node['platform_family']
when 'rhel', 'fedora'
"/var/lib/pgsql/#{version}/data"
when 'amazon'
if node['virtualization']['system'] == 'docker'
"/var/lib/pgsql#{version.delete('.')}/data"
else
"/var/lib/pgsql/#{version}/data"
end
when 'debian'
"/var/lib/postgresql/#{version}/main"
end
end
def conf_dir(version = node.run_state['postgresql']['version'])
case node['platform_family']
when 'rhel', 'fedora'
"/var/lib/pgsql/#{version}/data"
when 'amazon'
if node['virtualization']['system'] == 'docker'
"/var/lib/pgsql#{version.delete('.')}/data"
else
"/var/lib/pgsql/#{version}/data"
end
when 'debian'
"/etc/postgresql/#{version}/main"
end
end
# determine the platform specific service name
def platform_service_name(version = node.run_state['postgresql']['version'])
case node['platform_family']
when 'rhel', 'fedora'
"postgresql-#{version}"
when 'amazon'
if node['virtualization']['system'] == 'docker'
"postgresql#{version.delete('.')}"
else
"postgresql-#{version}"
end
else
'postgresql'
end
end
def follower?
::File.exist? "#{data_dir}/recovery.conf"
end
def initialized?
return true if ::File.exist?("#{conf_dir}/PG_VERSION")
false
end
def secure_random
r = SecureRandom.hex
Chef::Log.debug "Generated password: #{r}"
r
end
# determine the platform specific server package name
def server_pkg_name
platform_family?('debian') ? "postgresql-#{new_resource.version}" : "postgresql#{new_resource.version.delete('.')}-server"
end
# determine the appropriate DB init command to run based on RHEL/Fedora/Amazon release
# initdb defaults to the execution environment.
# https://www.postgresql.org/docs/9.5/static/locale.html
def rhel_init_db_command(new_resource)
cmd = if platform_family?('amazon')
'/usr/bin/initdb'
else
"/usr/pgsql-#{new_resource.version}/bin/initdb"
end
cmd << " --locale '#{new_resource.initdb_locale}'" if new_resource.initdb_locale
cmd << " -E '#{new_resource.initdb_encoding}'" if new_resource.initdb_encoding
cmd << " -D '#{data_dir(new_resource.version)}'"
end
# Given the base URL build the complete URL string for a yum repo
def yum_repo_url(base_url)
"#{base_url}/#{new_resource.version}/#{yum_repo_platform_family_string}/#{yum_repo_platform_string}"
end
# The postgresql yum repos URLs are organized into redhat and fedora directories.s
# route things to the right place based on platform_family
def yum_repo_platform_family_string
platform_family?('fedora') ? 'fedora' : 'redhat'
end
# Build the platform string that makes up the final component of the yum repo URL
def yum_repo_platform_string
platform = platform?('fedora') ? 'fedora' : 'rhel'
release = platform?('amazon') ? '6' : '$releasever'
"#{platform}-#{release}-$basearch"
end
# On Amazon use the RHEL 6 packages. Otherwise use the releasever yum variable
def yum_releasever
platform?('amazon') ? '6' : '$releasever'
end
# Fedora doesn't seem to know the right symbols for psql
def psql_environment
return {} unless platform?('fedora')
{ LD_LIBRARY_PATH: '/usr/lib64' }
end
# Generate a password if the value is set to generate.
def postgres_password(new_resource)
new_resource.password == 'generate' ? secure_random : new_resource.password
end
end
end

1
cookbooks/postgresql/metadata.json
View File

@ -1 +0,0 @@
{"name":"postgresql","version":"7.1.8","description":"Installs and configures postgresql for clients or servers","long_description":"","maintainer":"Sous Chefs","maintainer_email":"help@sous-chefs.org","license":"Apache-2.0","platforms":{"ubuntu":">= 0.0.0","debian":">= 0.0.0","fedora":">= 0.0.0","amazon":">= 0.0.0","redhat":">= 0.0.0","centos":">= 0.0.0","scientific":">= 0.0.0","oracle":">= 0.0.0"},"dependencies":{},"recommendations":{},"suggestions":{},"conflicting":{},"providing":{},"replacing":{},"attributes":{},"groupings":{},"recipes":{},"source_url":"https://github.com/sous-chefs/postgresql","issues_url":"https://github.com/sous-chefs/postgresql/issues","chef_version":[[">= 13.8"]],"ohai_version":[]}

14
cookbooks/postgresql/metadata.rb
View File

@ -1,14 +0,0 @@
# frozen_string_literal: true
name 'postgresql'
maintainer 'Sous Chefs'
maintainer_email 'help@sous-chefs.org'
license 'Apache-2.0'
description 'Installs and configures postgresql for clients or servers'
version '7.1.8'
source_url 'https://github.com/sous-chefs/postgresql'
issues_url 'https://github.com/sous-chefs/postgresql/issues'
chef_version '>= 13.8'
%w(ubuntu debian fedora amazon redhat centos scientific oracle).each do |os|
supports os
end

59
cookbooks/postgresql/resources/access.rb
View File

@ -1,59 +0,0 @@
# frozen_string_literal: true
#
# Cookbook:: postgresql
# Resource:: access
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
property :access_type, String, default: 'local'
property :access_db, String, default: 'all'
property :access_user, String, default: 'postgres'
property :access_method, String, default: 'ident'
property :cookbook, String, default: 'postgresql'
property :source, String, default: 'pg_hba.conf.erb'
property :access_addr, String
property :comment, String
action :grant do
config_resource = new_resource
with_run_context :root do # ~FC037
edit_resource(:template, "#{conf_dir}/pg_hba.conf") do |new_resource|
source new_resource.source
cookbook new_resource.cookbook
owner 'postgres'
group 'postgres'
mode '0600'
variables[:pg_hba] ||= {}
variables[:pg_hba][new_resource.name] = {
comment: new_resource.comment,
type: new_resource.access_type,
db: new_resource.access_db,
user: new_resource.access_user,
addr: new_resource.access_addr,
method: new_resource.access_method,
}
action :nothing
delayed_action :create
notifies :trigger, config_resource, :immediately
end
end
end
action :trigger do
new_resource.updated_by_last_action(true) # ~FC085
end
action_class do
include PostgresqlCookbook::Helpers
end

35
cookbooks/postgresql/resources/client_install.rb
View File

@ -1,35 +0,0 @@
# frozen_string_literal: true
#
# Cookbook:: postgresql
# Resource:: client_install
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
property :version, String, default: '9.6'
property :setup_repo, [true, false], default: true
action :install do
postgresql_repository 'Add downloads.postgresql.org repository' do
version new_resource.version
only_if { new_resource.setup_repo }
end
case node['platform_family']
when 'debian'
package "postgresql-client-#{new_resource.version}"
when 'rhel', 'fedora', 'amazon'
ver = new_resource.version.delete('.')
package "postgresql#{ver}"
end
end

67
cookbooks/postgresql/resources/database.rb
View File

@ -1,67 +0,0 @@
#
# Cookbook:: postgresql
# Resource:: database
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
property :template, String, default: 'template1'
property :encoding, String, default: 'UTF-8'
property :locale, String, default: 'en_US.UTF-8'
property :owner, String
# Connection prefernces
property :user, String, default: 'postgres'
property :database, String, name_property: true
property :host, String
property :port, Integer, default: 5432
action :create do
createdb = 'createdb'
createdb << " -E #{new_resource.encoding}" if new_resource.encoding
createdb << " -l #{new_resource.locale}" if new_resource.locale
createdb << " -T #{new_resource.template}" unless new_resource.template.empty?
createdb << " -O #{new_resource.owner}" if new_resource.owner
createdb << " -U #{new_resource.user}" if new_resource.user
createdb << " -h #{new_resource.host}" if new_resource.host
createdb << " -p #{new_resource.port}" if new_resource.port
createdb << " #{new_resource.database}"
bash "Create Database #{new_resource.database}" do
code createdb
user new_resource.user
not_if { follower? }
not_if { database_exists?(new_resource) }
end
end
action :drop do
converge_by "Drop PostgreSQL Database #{new_resource.database}" do
dropdb = 'dropdb'
dropdb << " -U #{new_resource.user}" if new_resource.user
dropdb << " --host #{new_resource.host}" if new_resource.host
dropdb << " --port #{new_resource.port}" if new_resource.port
dropdb << " #{new_resource.database}"
bash "drop postgresql database #{new_resource.database})" do
user 'postgres'
code dropdb
not_if { follower? }
only_if { database_exists?(new_resource) }
end
end
end
action_class do
include PostgresqlCookbook::Helpers
end

51
cookbooks/postgresql/resources/extension.rb
View File

@ -1,51 +0,0 @@
#
# Cookbook:: postgresql
# Resource:: extension
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
property :extension, String, name_property: true
property :old_version, String
property :version, String
# Connection prefernces
property :user, String, default: 'postgres'
property :database, String, required: true
property :host, [String, nil]
property :port, Integer, default: 5432
action :create do
bash "CREATE EXTENSION #{new_resource.name}" do
code create_extension_sql(new_resource)
user 'postgres'
action :run
environment(psql_environment)
not_if { follower? || extension_installed?(new_resource) }
end
end
action :drop do
bash "DROP EXTENSION #{new_resource.name}" do
code psql_command_string(new_resource, "DROP EXTENSION IF EXISTS \"#{new_resource.extension}\"")
user 'postgres'
action :run
environment(psql_environment)
not_if { follower? }
only_if { extension_installed?(new_resource) }
end
end
action_class do
include PostgresqlCookbook::Helpers
end

55
cookbooks/postgresql/resources/ident.rb
View File

@ -1,55 +0,0 @@
# frozen_string_literal: true
#
# Cookbook:: postgresql
# Resource:: access
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
property :mapname, String, required: true
property :source, String, default: 'pg_ident.conf.erb'
property :cookbook, String, default: 'postgresql'
property :system_user, String, required: true
property :pg_user, String, required: true
property :comment, String
action :create do
ident_resource = new_resource
with_run_context :root do
edit_resource(:template, "#{conf_dir}/pg_ident.conf") do |new_resource|
source new_resource.source
cookbook new_resource.cookbook
owner 'postgres'
group 'postgres'
mode '0640'
variables[:pg_ident] ||= {}
variables[:pg_ident][new_resource.name] = {
comment: new_resource.comment,
mapname: new_resource.mapname,
system_user: new_resource.system_user,
pg_user: new_resource.pg_user,
}
action :nothing
delayed_action :create
notifies :trigger, ident_resource, :immediately
end
end
end
action :trigger do
new_resource.updated_by_last_action(true) # ~FC085
end
action_class do
include PostgresqlCookbook::Helpers
end

90
cookbooks/postgresql/resources/repository.rb
View File

@ -1,90 +0,0 @@
# frozen_string_literal: true
#
# Cookbook:: postgresql
# Resource:: repository
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
property :version, String, default: '9.6'
property :enable_pgdg, [true, false], default: true
property :enable_pgdg_source, [true, false], default: false
property :enable_pgdg_updates_testing, [true, false], default: false
property :enable_pgdg_source_updates_testing, [true, false], default: false
property :yum_gpg_key_uri, String, default: 'https://download.postgresql.org/pub/repos/yum/RPM-GPG-KEY-PGDG'
property :apt_gpg_key_uri, String, default: 'https://download.postgresql.org/pub/repos/apt/ACCC4CF8.asc'
action :add do
case node['platform_family']
when 'rhel', 'fedora', 'amazon'
remote_file "/etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG-#{new_resource.version}" do
source new_resource.yum_gpg_key_uri
end
yum_repository "PostgreSQL #{new_resource.version}" do # ~FC005
repositoryid "pgdg#{new_resource.version}"
description "PostgreSQL.org #{new_resource.version}"
baseurl yum_repo_url('https://download.postgresql.org/pub/repos/yum')
enabled new_resource.enable_pgdg
gpgcheck true
gpgkey "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG-#{new_resource.version}"
end
yum_repository "PostgreSQL #{new_resource.version} - source " do
repositoryid "pgdg#{new_resource.version}-source"
description "PostgreSQL.org #{new_resource.version} Source"
baseurl yum_repo_url('https://download.postgresql.org/pub/repos/yum/srpms')
enabled new_resource.enable_pgdg_source
gpgcheck true
gpgkey "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG-#{new_resource.version}"
end
yum_repository "PostgreSQL #{new_resource.version} - updates testing" do
repositoryid "pgdg#{new_resource.version}-updates-testing"
description "PostgreSQL.org #{new_resource.version} Updates Testing"
baseurl yum_repo_url('https://download.postgresql.org/pub/repos/yum/testing')
enabled new_resource.enable_pgdg_updates_testing
gpgcheck true
gpgkey "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG-#{new_resource.version}"
end
yum_repository "PostgreSQL #{new_resource.version} - source - updates testing" do
repositoryid "pgdg#{new_resource.version}-source-updates-testing"
description "PostgreSQL.org #{new_resource.version} Source Updates Testing"
baseurl yum_repo_url('https://download.postgresql.org/pub/repos/yum/srpms/testing')
enabled new_resource.enable_pgdg_source_updates_testing
gpgcheck true
gpgkey "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG-#{new_resource.version}"
end
when 'debian'
apt_update
package 'apt-transport-https'
apt_repository 'postgresql_org_repository' do
uri 'https://download.postgresql.org/pub/repos/apt/'
components ['main', new_resource.version.to_s]
distribution "#{node['lsb']['codename']}-pgdg"
key new_resource.apt_gpg_key_uri
cache_rebuild true
end
else
raise "The platform_family '#{node['platform_family']}' or platform '#{node['platform']}' is not supported by the postgresql_repository resource. If you believe this platform can/should be supported by this resource please file and issue or open a pull request at https://github.com/sous-chefs/postgresql"
end
end
action_class do
include PostgresqlCookbook::Helpers
end

52
cookbooks/postgresql/resources/server_conf.rb
View File

@ -1,52 +0,0 @@
# frozen_string_literal: true
#
# Cookbook:: postgresql
# Resource:: server_conf
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
include PostgresqlCookbook::Helpers
property :version, String, default: '9.6'
property :data_directory, String, default: lazy { data_dir }
property :hba_file, String, default: lazy { "#{conf_dir}/pg_hba.conf" }
property :ident_file, String, default: lazy { "#{conf_dir}/pg_ident.conf" }
property :external_pid_file, String, default: lazy { "/var/run/postgresql/#{version}-main.pid" }
property :stats_temp_directory, String, default: lazy { "/var/run/postgresql/#{version}-main.pg_stat_tmp" }
property :port, Integer, default: 5432
property :additional_config, Hash, default: {}
property :cookbook, String, default: 'postgresql'
action :modify do
template "#{conf_dir}/postgresql.conf" do
cookbook new_resource.cookbook
source 'postgresql.conf.erb'
owner 'postgres'
group 'postgres'
mode '0644'
variables(
data_dir: new_resource.data_directory,
hba_file: new_resource.hba_file,
ident_file: new_resource.ident_file,
external_pid_file: new_resource.external_pid_file,
stats_temp_directory: new_resource.stats_temp_directory,
port: new_resource.port,
additional_config: new_resource.additional_config
)
end
end
action_class do
include PostgresqlCookbook::Helpers
end

93
cookbooks/postgresql/resources/server_install.rb
View File

@ -1,93 +0,0 @@
#
# Cookbook:: postgresql
# Resource:: server_install
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
include PostgresqlCookbook::Helpers
property :version, String, default: '9.6'
property :setup_repo, [true, false], default: true
property :hba_file, String, default: lazy { "#{conf_dir}/main/pg_hba.conf" }
property :ident_file, String, default: lazy { "#{conf_dir}/main/pg_ident.conf" }
property :external_pid_file, String, default: lazy { "/var/run/postgresql/#{version}-main.pid" }
property :password, [String, nil], default: 'generate' # Set to nil if we do not want to set a password
property :port, Integer, default: 5432
property :initdb_locale, String
property :initdb_encoding, String
# Connection preferences
property :user, String, default: 'postgres'
property :database, String
property :host, [String, nil]
action :install do
node.run_state['postgresql'] ||= {}
node.run_state['postgresql']['version'] = new_resource.version
postgresql_client_install 'Install PostgreSQL Client' do
version new_resource.version
setup_repo new_resource.setup_repo
end
# First install the postgresql-common package
if platform_family?('debian')
package 'postgresql-common'
initdb_options = ''
initdb_options << "--locale #{new_resource.initdb_locale}" if new_resource.initdb_locale
initdb_options << " -E #{new_resource.initdb_encoding}" if new_resource.initdb_encoding
template '/etc/postgresql-common/createcluster.conf' do
source 'createcluster.conf.erb'
cookbook 'postgresql'
variables(
initdb_options: initdb_options
)
end
end
package server_pkg_name
end
action :create do
execute 'init_db' do
command rhel_init_db_command(new_resource)
user new_resource.user
not_if { initialized? }
only_if { platform_family?('rhel', 'fedora', 'amazon') }
end
# We use to use find_resource here.
# But that required the user to do the same in their recipe.
# This also seemed to never trigger notifications, therefore requiring a log resource
# to notify the enable/start on the service, which always fires (Check v7.0 tag for more)
service 'postgresql' do
service_name platform_service_name
supports restart: true, status: true, reload: true
action [:enable, :start]
end
# Generate a random password or set it as per new_resource.password.
bash 'generate-postgres-password' do
user 'postgres'
code alter_role_sql(new_resource)
not_if { user_has_password?(new_resource) }
not_if { new_resource.password.nil? }
end
end
action_class do
include PostgresqlCookbook::Helpers
end

91
cookbooks/postgresql/resources/user.rb
View File

@ -1,91 +0,0 @@
#
# Cookbook:: postgresql
# Resource:: user
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
property :create_user, String, name_property: true
property :superuser, [true, false], default: false
property :createdb, [true, false], default: false
property :createrole, [true, false], default: false
property :inherit, [true, false], default: true
property :replication, [true, false], default: false
property :login, [true, false], default: true
property :password, String
property :encrypted_password, String
property :valid_until, String
property :attributes, Hash, default: {}
# Connection prefernces
property :user, String, default: 'postgres'
property :database, String
property :host, String
property :port, Integer, default: 5432
action :create do
Chef::Log.warn('You cannot use "attributes" property with create action.') unless new_resource.attributes.empty?
execute "create postgresql user #{new_resource.create_user}" do # ~FC009
user 'postgres'
command create_user_sql(new_resource)
sensitive new_resource.sensitive
environment(psql_environment)
not_if { follower? || user_exists?(new_resource) }
end
end
action :update do
if new_resource.attributes.empty?
execute "update postgresql user #{new_resource.create_user}" do
user 'postgres'
command update_user_sql(new_resource)
environment(psql_environment)
sensitive true
not_if { follower? }
only_if { user_exists?(new_resource) }
end
else
new_resource.attributes.each do |attr, value|
v = if value.is_a?(TrueClass) || value.is_a?(FalseClass)
value.to_s
else
"'#{value}'"
end
execute "Update postgresql user #{new_resource.create_user} to set #{attr}" do
user 'postgres'
command update_user_with_attributes_sql(new_resource, v)
environment(psql_environment)
sensitive true
not_if { follower? }
only_if { user_exists?(new_resource) }
end
end
end
end
action :drop do
execute "drop postgresql user #{new_resource.create_user}" do
user 'postgres'
command drop_user_sql(new_resource)
environment(psql_environment)
sensitive true
not_if { follower? }
only_if { user_exists?(new_resource) }
end
end
action_class do
include PostgresqlCookbook::Helpers
end

41
cookbooks/postgresql/templates/createcluster.conf.erb
View File

@ -1,41 +0,0 @@
# Default values for pg_createcluster(8)
# Occurrences of '%v' are replaced by the major version number,
# and '%c' by the cluster name. Use '%%' for a literal '%'.
# Create a "main" cluster when a new postgresql-x.y server package is installed
#create_main_cluster = true
# Default start.conf value, must be one of "auto", "manual", and "disabled".
# See pg_createcluster(8) for more documentation.
#start_conf = 'auto'
# Default data directory.
#data_directory = '/var/lib/postgresql/%v/%c'
# Default directory for transaction logs
# Unset by default, i.e. transaction logs remain in the data directory.
#waldir = '/var/lib/postgresql/wal/%v/%c/pg_wal'
# Options to pass to initdb.
initdb_options = '<%= @initdb_options %>'
# The following options are copied into the new cluster's postgresql.conf:
# Enable SSL by default (using the "snakeoil" certificates installed by the
# ssl-cert package, unless configured otherwise here)
ssl = on
# Show cluster name in process title
cluster_name = '%v/%c'
# Put stats_temp_directory on tmpfs
stats_temp_directory = '/var/run/postgresql/%v-%c.pg_stat_tmp'
# Add prefix to log lines
log_line_prefix = '%%m [%%p] %%q%%u@%%d '
# Add "include_dir" in postgresql.conf
add_include_dir = 'conf.d'
# Directory for additional createcluster config
include_dir '/etc/postgresql-common/createcluster.d'

33
cookbooks/postgresql/templates/pg_hba.conf.erb
View File

@ -1,33 +0,0 @@
# This file was automatically generated and dropped off by Chef!
# PostgreSQL Client Authentication Configuration File
# ===================================================
#
# Refer to the "Client Authentication" section in the PostgreSQL
# documentation for a complete description of this file.
local all postgres peer
# TYPE DATABASE USER ADDRESS METHOD
# "local" is for Unix domain socket connections only
local all all peer
# IPv4 local connections:
host all all 127.0.0.1/32 md5
# IPv6 local connections:
host all all ::1/128 md5
###########
# From the postgresql_access resources
###########
<% @pg_hba.each do |k,v| -%>
# <%= k %>
<% if v[:comment] -%>
# <%= v[:comment] %>
<% end -%>
<% if v[:addr] %>
<%= v[:type].ljust(7) %> <%= v[:db].ljust(15) %> <%= v[:user].ljust(15) %> <%= v[:addr].ljust(23) %> <%= v[:method] %>
<% else %>
<%= v[:type].ljust(7) %> <%= v[:db].ljust(15) %> <%= v[:user].ljust(15) %> <%= v[:method] %>
<% end %>
<% end %>

49
cookbooks/postgresql/templates/pg_ident.conf.erb
View File

@ -1,49 +0,0 @@
# PostgreSQL User Name Maps
# =========================
#
# Refer to the PostgreSQL documentation, chapter "Client
# Authentication" for a complete description. A short synopsis
# follows.
#
# This file controls PostgreSQL user name mapping. It maps external
# user names to their corresponding PostgreSQL user names. Records
# are of the form:
#
# MAPNAME SYSTEM-USERNAME PG-USERNAME
#
# (The uppercase quantities must be replaced by actual values.)
#
# MAPNAME is the (otherwise freely chosen) map name that was used in
# pg_hba.conf. SYSTEM-USERNAME is the detected user name of the
# client. PG-USERNAME is the requested PostgreSQL user name. The
# existence of a record specifies that SYSTEM-USERNAME may connect as
# PG-USERNAME.
#
# If SYSTEM-USERNAME starts with a slash (/), it will be treated as a
# regular expression. Optionally this can contain a capture (a
# parenthesized subexpression). The substring matching the capture
# will be substituted for \1 (backslash-one) if present in
# PG-USERNAME.
#
# Multiple maps may be specified in this file and used by pg_hba.conf.
#
# No map names are defined in the default configuration. If all
# system user names and PostgreSQL user names are the same, you don't
# need anything in this file.
#
# This file is read on server startup and when the postmaster receives
# a SIGHUP signal. If you edit the file on a running system, you have
# to SIGHUP the postmaster for the changes to take effect. You can
# use "pg_ctl reload" to do that.
# Put your actual configuration here
# ----------------------------------
# MAPNAME SYSTEM-USERNAME PG-USERNAME
<% @pg_ident.each do |k,v| -%>
<% if v[:comment] -%>
# <%= v[:comment] %>
<% end -%>
<%= v[:mapname].ljust(15) %> <%= v[:system_user].ljust(23) %> <%= v[:pg_user].ljust(15) %>
<% end %>

2
cookbooks/postgresql/templates/pgsql.sysconfig.erb
View File

@ -1,2 +0,0 @@
PGDATA=<%= @postgresql_dir %>
PGPORT=<%= @port %>

26
cookbooks/postgresql/templates/postgresql.conf.erb
View File

@ -1,26 +0,0 @@
# PostgreSQL configuration file
# This file was automatically generated and dropped off by chef!
# Please refer to the PostgreSQL documentation for details on
# configuration settings.
data_directory = '<%= @data_dir %>'
hba_file = '<%= @hba_file %>'
ident_file = '<%= @ident_file %>'
external_pid_file = '<%= @external_pid_file %>'
stats_temp_directory = '<%= @stats_temp_directory %>'
port = <%= @port %>
<% @additional_config.sort.each do |key, value| %>
<% next if value.nil? -%>
<%= key %> = <%=
case value
when String
"'#{value}'"
when TrueClass
'on'
when FalseClass
'off'
else
value
end
%>
<% end %>

6
cookbooks/postgresql/templates/postgresql.service.erb
View File

@ -1,6 +0,0 @@
[Service]
.include /usr/lib/systemd/system/<%= @svc_name %>.service
Environment=
Environment=PGPORT=<%= @port %>
Environment=PGDATA=<%= @data_dir %>

1
site-cookbooks/postgresql Submodule

@ -0,0 +1 @@
Subproject commit bf68433d82f12fc41bd9a0e3e2ba177282012833