paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-10-23 04:52:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

kandra: Remove PostgreSQL upgrade key.

Browse Source
This commit is contained in:
Alex Vandiver
2025-05-14 10:21:40 -04:00
committed by Tim Abbott
parent c04558fe31
commit 47238ed74c
3 changed files with 1 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
puppet/kandra/manifests/profile/postgresql.pp
View File

@@ -53,13 +53,6 @@ class kandra::profile::postgresql inherits kandra::profile::base {
before => File["${zulip::postgresql_base::postgresql_datadir}/standby.signal"],
notify => Exec[$zulip::postgresql_base::postgresql_restart],
}
Kandra::User_Dotfiles['root'] {
authorized_keys => ['common', 'postgres-upgrade'],
}
} else {
Kandra::User_Dotfiles['root'] {
keys => ['internal-read-only-deploy-key', 'postgres-upgrade'],
}
}
file { "${zulip::postgresql_base::postgresql_confdir}/pg_hba.conf":

3
puppet/kandra/manifests/profile/prod_app_frontend.pp
View File

@@ -6,8 +6,7 @@ class kandra::profile::prod_app_frontend inherits kandra::profile::base {
keys => 'internal-limited-write-deploy-key',
}
Kandra::User_Dotfiles['zulip'] {
keys => 'internal-limited-write-deploy-key',
authorized_keys => ['common', 'postgres-upgrade-only-supervisor'],
keys => 'internal-limited-write-deploy-key',
}
zulip::sysctl { 'conntrack':

4
puppet/kandra/manifests/profile/staging_app_frontend.pp
View File

@@ -2,10 +2,6 @@ class kandra::profile::staging_app_frontend inherits kandra::profile::base {
include kandra::app_frontend
Kandra::User_Dotfiles['zulip'] {
authorized_keys => ['common', 'postgres-upgrade-only-supervisor'],
}
file { '/etc/nginx/sites-available/zulip-staging':
ensure => file,
require => Package['nginx-full'],