summaryrefslogtreecommitdiff
path: root/puppet/modules/site_couchdb/manifests/init.pp
AgeCommit message (Collapse)Author
2016-07-13Notify Exec[shorewall_check] not Service[shorew..]varac
Latest shorewall module does `shorewall check` (executed by `Exec[shorewall_check]`) so every related resource change must notify this Exec instead of `Service[shorewall]` as before.
2016-06-30Remove bigcouch (#8056)Micah
Change-Id: I0c6e27298c63bd37de1410985d054799818c22a4
2016-02-26Merge branch 'develop' of ssh://leap.se/leap_platform into developelijah
2016-02-26plain couchdb now required, bigcouch support disabled.elijah
2016-02-25remove couchdb_pwhash_alg leftovervarac
2016-02-24Use site_couchdb::plain even when couch.master is set top "master"varac
2016-02-23default to plain couchdb, unless otherwise specified.elijah
# Conflicts: # puppet/modules/site_couchdb/manifests/plain.pp
2016-01-27[feat] Cronjob to delete orphaned userdbsvarac
- Resolves: #7418
2016-01-22restructured site.pp, now only one class gets included in site.pp per ↵varac
service (Bug #6851) Also, moved global Exec{} defaults to site.pp Change-Id: I9ae91b77afde944d2f1312613b9d9030e32239dd
2015-10-12[feat] Remove tapicero couchdb uservarac
- Resolves: #7514
2015-10-06[feat] remove tapicero leftoversvarac
Soledad now creates user-dbs, which has been done by tapicero in the past. we need to remove any leftovers from tapicero.
2015-06-11use couch.pwhash_alg hiera variable for hashing couchdb admin pwvarac
use this to run a single, plain couchdb node, using couchdb 1.6 from the leap repo: "couch": { "master": true, "pwhash_alg": "pbkdf2" } Change-Id: Ie4f34c2c5cb9feca7a10450bcf0bc260c8aa9d33
2014-11-04change ordering hints to use refresh_stunnel exec instead of service (#6287)Micah Anderson
In a multi-node couch deployment, it was observed that the Service['stunnel'] would be activated, and then later a stunnel::client was created which would trigger an Exec['refresh_stunnel']. Because of this, and the ordering hints that were in place, the service would get started, and then the couchdb databases, users, designs, etc. were being put into place and then a stunnel client was created, triggering the refresh_stunnel exec, which would cause an interruption in the connectivity and result in failures. This change replaces the Service['stunnel'] hint with the the Exec['refresh_stunnel'] to make sure that the stunnels are fully setup before attempting couch operations. Change-Id: I33ddd24884b3c23a1df5555ca53ca65cd703da50
2014-06-25lint site_couchdbelijah
2014-06-25add replication userAzul
2014-06-25site_couchdb: support auto-stunnel setup, split master, bigcouch, and mirror ↵elijah
out into separate files.
2014-06-25first steps towards mirroring couchAzul
2014-06-25separate bigcouch specifics from init.ppAzul
2014-04-17change class instantiating to be includes and organizing things in theMicah Anderson
class to be more visually logical (#5269, #4590, #3712) Change-Id: I58c28c3bc62e67b25f33da3378e8146110471613
2014-04-17Change couchdb ordering hints (#5269, #4590, #3712):Micah Anderson
. make the couchdb service start after the stunnels have been setup. This may improve the cluster membership coming online faster . replace the two Couchdb::Create_db ordering hints (for the 'users' and 'tokens' databases) with a generic Class['site_config::create_dbs'] hint. This makes it so we get the ordering hint for all databases, which we were not before, without having to individually list them . replace the two Couchdb::Add_user ordering hints (for the $couchdb_webapp_user and the $couchdb_soledad_user) with a generic ordering hint for Class['site_couchdb::add_users'] ordering hint. This makes it so we get the ordering hint for all the users, which we were not before, without having to individually list them Change-Id: Ia63e62d68d24e77a49d4ef928a2a8130ab7bccb9
2014-04-17add exec resources to run the couchdb tests to wait for nodes andMicah Anderson
cluster membership to settle, before attempting any operations (#5269, #4590, #3712) Change-Id: Ic9826dda1c242e705ce85ae218766496bdd8ecbd
2014-04-15configure couchdb after starting shorewall (#53)varac
2014-03-13deploy automatic compaction via platform (Feature #4798)varac
2014-02-19add site_check_mk::agent::tapicero, site_check_mk::agent::couchdbvarac
2014-02-13added site_check_mk::agent::couchdb and site_check_mk::agent::soledad for ↵varac
local checks
2014-01-30Merge branch 'feature/4889_restrict_port_5984_proc_to_localhost' into develop0.5.0rc2varac
2014-01-21properly purge cloudant repository leftovers (#4971)varac
2014-01-20configure leap_platform to install our leap bigcouch package (Feature #4971)varac
2014-01-07restrict bigcouch chttp proc to localhostvarac
2013-11-28setup customer couchdb databaseMicah Anderson
Change-Id: Ic0e9f5f6a1f28d865d7757a9de0d9399a6a9a5e3 Conflicts: puppet/modules/site_couchdb/manifests/init.pp
2013-11-27add missing nickserver hiera value lookupMicah Anderson
Change-Id: I77061054f4768f0677ca9c498e6cd6d5df4ff806
2013-11-27add the tapicero couchdb user, and appropriate rolesMicah Anderson
Change-Id: I41e9a73c8d04d5a2d74b41c8e32aca9906f3a4cf
2013-11-27add leap_mx couchdb user/passwordMicah Anderson
Change-Id: Ice83115e0feabddd40ad74c2a6e98e24da9b4c2f
2013-11-27pretty reformat couchdb.json and site_couchdb/manifests/init.pp, ↵Micah Anderson
alphabetizing couchdb users Change-Id: I88264d32e9381f826652d1631083ba371e2b1b54
2013-11-27break out the database creation, user creation and design document loading ↵Micah Anderson
into different classes Change-Id: Idd126d69e1fbe9c9794ad50337307dcc5dd635f4
2013-11-27make some more dependency chains explicitMicah Anderson
Change-Id: Ib9525c3a933041fa9b378e1869c0a866375bb509
2013-10-31Automate local backup of couchdb data (Feature #4350)varac
2013-10-30Users with access to a db are called members - not readers (#4219)Azul
( they can read and write ). I think couch themselves changed the termology at some point but i might just have used the wrong term from the beginning on. Let's call them members either way because it's more clear that read only members require aditional design docs.
2013-09-18Setup a class dependency for every tag 'leap_service' to make sure that ↵Micah Anderson
shorewall is setup before the service is setup. This is necessary due to the strict initial firewall that stops various service setup operations from happening, but is relaxed once shorewall is setup properly (#3782) Change-Id: Ia9640c4118aa0053cdb99e7bc11860fed5527501
2013-09-13setup stunnel config to use default x509 cert,key+ca (#3837)varac
* fix stunnel setups for couchdb, mx, webapp services
2013-09-02create all webapp databases so _security is set (fixes 3517)Azul
2013-08-30create sessions db with puppet (Bug #3597)varac
2013-08-27setup bigcouch logrotation (#3491)Micah Anderson
Change-Id: Ia35cf7a9fc1d0fad6a57bbae73968ab6b8f0c847
2013-08-14require that the couchdb::query::setup has been run before any attempts are ↵Micah Anderson
made to create databases or add users as these would fail otherwise. Closes: #3466 Change-Id: Ifa8b3da5858ce858fd319c4a659e70d20a65d3e0
2013-05-23include site_couchdb::bigcouch::add_nodes in site_couchdb/manifests/init.ppvarac
2013-04-24take out plain couchdb setup, always deploy bigcouch (Feature #2176)varac
2013-04-24Use pre-salted+hashed admin pw for couchdb (Feature #1941)varac
2013-04-24updated needed couchdb users and DBsvarac
2013-04-24Use pre-salted+hashed user pw for couchdb (Feature #2324)varac
2013-04-04add Erlang Distributed Node Protocol Port json entry under bigcouchMicah Anderson
setup ednp_server and ednp_client stunnels update couchdb puppet submodule to support configurable ednp_port parameter and general module cleanup pass ednp_port to couchdb setup so that it is configured in the vm.args template clarify in comments the difference between the epmd and ednp ports remove hard-coded erlang_vm_port variable and instead setup shorewall to allow for the stunnel connection only setup dnat rules for the ednp client connections