Demo- Database Teleport

Background:

What is Database Teleport? How can we use it?

Scenario

We want to use the run books to get access to the databases using teleport so that we can run this very important hypothetical query: SELECT CURRENT_USER;

We also want to make sure everyone understands how to approve requests, and how to answer questions about them.

  • Read only activity does not require a request/approval in staging. Everyone should already have access. However, due to some confusion this morning, we've re-added permission for folks to request access in staging. The recommended approach for now is to approve these requests with a note in the message box that they are no longer required for staging.
  • Requests currently expire in 24 hours. They can be renewed before or after expiration using the same process.
  • When reviewing read/write requests, the question to ask yourself is "can this be done with read only access?" We should encourage folks to request read-only access first if they are unsure, and send a second request later for write access if they end up needing it.
  • There is currently no read/write rails console. The vast majority of rails console use is read only. For those who don't have write access but need it (especially in production), we recommend giving the code to an SRE to run.

Meeting Format

  • Demo performed (Note date in comments)

Acceptance Criteria

Edited by Devin Sylva