62 lines
1.7 KiB
Ruby
62 lines
1.7 KiB
Ruby
#
|
|
# Cookbook:: kosmos-postgresql
|
|
# Recipe:: replica
|
|
#
|
|
|
|
postgresql_version = "12"
|
|
postgresql_service = "postgresql@#{postgresql_version}-main"
|
|
|
|
postgresql_custom_server postgresql_version do
|
|
role "replica"
|
|
end
|
|
|
|
service postgresql_service do
|
|
supports restart: true, status: true, reload: true
|
|
end
|
|
|
|
postgresql_data_bag_item = data_bag_item('credentials', 'postgresql')
|
|
|
|
primary = postgresql_primary
|
|
|
|
unless primary.nil?
|
|
postgresql_data_dir = "#{node["kosmos_encfs"]["data_directory"]}/postgresql/#{postgresql_version}/main"
|
|
|
|
if node['kosmos-postgresql']['ready_to_set_up_replica']
|
|
execute "set up replication" do
|
|
command <<-EOF
|
|
systemctl stop #{postgresql_service}
|
|
mv #{postgresql_data_dir} #{postgresql_data_dir}.old
|
|
pg_basebackup -h #{primary[:ipaddress]} -U replication -D #{postgresql_data_dir} -R
|
|
chown -R postgres:postgres #{postgresql_data_dir}
|
|
systemctl start #{postgresql_service}
|
|
EOF
|
|
environment 'PGPASSWORD' => postgresql_data_bag_item['replication_password']
|
|
sensitive true
|
|
not_if { ::File.exist? "#{postgresql_data_dir}/standby.signal" }
|
|
end
|
|
end
|
|
|
|
postgresql_access "replication" do
|
|
access_type "host"
|
|
access_db "replication"
|
|
access_user "replication"
|
|
access_addr "#{primary[:ipaddress]}/32"
|
|
access_method "md5"
|
|
notifies :reload, "service[#{postgresql_service}]", :immediately
|
|
end
|
|
|
|
# On the next Chef run the replica will be set up
|
|
node.normal['kosmos-postgresql']['ready_to_set_up_replica'] = true
|
|
|
|
unless node.chef_environment == "development"
|
|
include_recipe "kosmos-base::firewall"
|
|
|
|
firewall_rule "postgresql primary #{primary[:hostname]}" do
|
|
port 5432
|
|
protocol :tcp
|
|
command :allow
|
|
source primary[:ipaddress]
|
|
end
|
|
end
|
|
end
|