There is no specialized file for controlling grants on analytics boxes, and some maybe obsolete. Audit and puppetize them.
This was created after T114396 request.
Description
Description
Details
Details
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| analytics-grants.sql.erb: Add new grants | operations/puppet | production | +27 -12 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Restricted Task | |||||
| Resolved | None | T114476 Puppetize grants for mysql analytics servers |
Event Timeline
Comment Actions
This has been partially done on https://phabricator.wikimedia.org/rOPUP757b0ebf40b936c1e07a3881105588b333c8b500
It has some blockers for auditing and some puppet work on refactoring grants.
Comment Actions
Change 459896 had a related patch set uploaded (by Marostegui; owner: Marostegui):
[operations/puppet@production] analytics-grants.sql.erb: Add new grants
Comment Actions
Change 459896 merged by Marostegui:
[operations/puppet@production] analytics-grants.sql.erb: Add new grants
Comment Actions
I have renamed the file from research-grants.sql.erb to analytics-grants.sql.erb so we can have all the users that are actually active (T200801#4570548) on dbstore1002 puppetized.
Also added some new users that were not on that file yet.
We are still auditing and we will probably drop all the ones that are not really used as per T200801#4570548 //cc @elukey - for now. All the ones that do have had connections are now on that sql file. If we end up discovering that some others aren't active but should be there, I will edit that file.
I am going to close this for now as resolved and we can modify the file depending on the outcome of T200801