Page MenuHomePhabricator

Automated application of grants for Cassandra
Open, LowPublic

Description

Now that we can define multiple users per cluster for Cassandra (T235299), we can move towards automating the loading of grants. As these operations are idempotent, we can re-apply these grants without issue, and in turn this allows us to automate new grants that are issued and managed by Puppet.

Event Timeline

To be clear: will these be applied on every Puppet run, or only when the file has changed?

To be clear: will these be applied on every Puppet run, or only when the file has changed?

That's kinda up to us - every puppet run would be easiest, but that's a lot of loads. Checking when the file has changed would be easily done

Change 739872 had a related patch set uploaded (by Hnowlan; author: Hnowlan):

[operations/puppet@production] cassandra: load grants files upon change

https://gerrit.wikimedia.org/r/739872

Change 739872 merged by Hnowlan:

[operations/puppet@production] cassandra: load grants files upon change

https://gerrit.wikimedia.org/r/739872