Page MenuHomePhabricator

Audit and remove watchdog user
Closed, ResolvedPublic

Description

Now that Tendril is gone, we need to review and (if it is fine) remove: watchdog@10.% user from all the hosts.

-- Grants for 'watchdog'@'10.%'
GRANT PROCESS, REPLICATION CLIENT, SELECT, SHOW DATABASES ON *.* TO `watchdog`@`10.%` IDENTIFIED BY PASSWORD '*xx';

This user used to be used by Tendril, but we need to double check if it is being used for something else.

Progress

  • s1
  • s2
  • s3
  • s4 (pending db1146:3314)
  • s5
  • s6
  • s7
  • s8
  • x1
  • x2
  • es1
  • es2
  • es3
  • es4
  • es5
  • pc1
  • pc2
  • pc3

Related Objects

Event Timeline

Marostegui triaged this task as Medium priority.Feb 10 2022, 7:17 AM
Marostegui moved this task from Triage to Ready on the DBA board.
Marostegui moved this task from Ready to In progress on the DBA board.

Removed from db2071 for now.

Mentioned in SAL (#wikimedia-operations) [2022-02-10T09:30:12Z] <marostegui> Remove watchdog@10.% user from db2071 T301442

I have removed this user from s6 codfw to check if something breaks.

Mentioned in SAL (#wikimedia-operations) [2022-02-11T05:56:31Z] <marostegui> Remove watchdog@10.% user from s6 codfw T301442

Removed from s6 eqiad as well. This user no longer exists on s6.

Removed from x2, will leave it till tomorrow and if nothing breaks on s6 and x2 hosts, I will proceed with the rest of sections.

Mentioned in SAL (#wikimedia-operations) [2022-02-15T05:58:49Z] <marostegui> Remove watchdog@10.% user from es1-es5 T301442

Mentioned in SAL (#wikimedia-operations) [2022-02-15T05:59:55Z] <marostegui> Remove watchdog@10.% user from pc1-pc3 T301442

BTW, I cannot discard there could be also a tendril user on some dbs, due to confussion when adding to monitoring. Tendril used either the watchdog or the tendril user AFAIK.

I will run a new report and tackle anything remaining.

BTW, I cannot discard there could be also a tendril user on some dbs, due to confussion when adding to monitoring. Tendril used either the watchdog or the tendril user AFAIK.

That was checked already. There were none

Marostegui updated the task description. (Show Details)

This is all done