Ian Baum authored 4 years ago and Balasankar C committed 4 years ago

* Adds postgresql['cert_auth_addresses'] attribute
* Updates pg_hba.conf template to add entries in that attribute

This setting needs to be enabled for pg_rewind to work during a Patroni
failover.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/267144

Robert Marshall authored 4 years ago and Balasankar C committed 4 years ago

- Adds postgresql['hostssl']; defaults to `false`. If set to `true`,
  then `host` type connections will be set as `hostssl` for
  `trust_auth_cidr_addresses` and `md5_auth_cidr_addresses` entries.

Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

Hossein Pursultani authored 4 years ago and DJ Mountney committed 4 years ago

This also includes Psycopg2 which is required by both patroni service
and patronictl commands.

PostgreSQL supports CSV logging out of the box, and we should enabled
this form of structured logging to make it easier to parse and ingest
these logs into our Elasticsearch cluster.

This came out of an investigation in
https://gitlab.com/gitlab-com/gl-infra/infrastructure/issues/9254 and
pertains to
https://gitlab.com/gitlab-com/gl-infra/infrastructure/issues/4973.

For users who have disabled the bundled postgresql daemon, this can be used to link the appropriate binaries accordingly.

Useful if they want to use our bundled backup rake tasks

To match the standard chef behavior

Removed unused init template