Grant access to postgres_exporter on some tables

Production Change

Due to problems in our monitoring, that are reported in the following issue: https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/12051

We want to grant access to the user postgresql exporter on the following tables.

  • ci_job_artifacts
  • ci_builds
  • ci_builds_metadata
  • web_hook_logs
  • sent_notifications

There are no side effects of this grant.

Change Details

  1. Services Impacted - Database
  2. Change Technician - @Finotto
  3. Change Criticality - C2
  4. Change Type - changeunscheduled, changescheduled
  5. Change Reviewer - @abrandl
  6. Due Date - 2020/12/09 10 UTC.
  7. Time tracking - 3 min.
  8. Downtime Component - 0

Detailed steps for the change

Change Steps - steps to take to execute the change

Estimated Time to Complete (mins) - 1 - min

  • GRANT SELECT ON TABLE events, ci_job_artifacts, ci_builds, ci_builds_metadata, web_hook_logs, sent_notifications TO postgres_exporter;

Rollback

Rollback steps - steps to be taken in the event of a need to rollback this change

Estimated Time to Complete (mins) - 1

  • REVOKE SELECT ON TABLE events, ci_job_artifacts, ci_builds, ci_builds_metadata, web_hook_logs, sent_notifications FROM postgres_exporter;
Edited by Jose Finotto