Skip to content

[GSTG] Automate setup of Patroni cluster integration with Teleport

To finish the integration with Teleport on https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/14956 we need to implement the automated setup of the Patroni clusters, to perform the following:

  • Create console-* database users and grant them the proper privileges
  • Setup the pg_hba.conf entries for all console-* users
  • Deploy the SSL CA certificate and configure the ssl_ca_file PG parameter

Acceptance criteria:

  • Perform any required changes in the related roles and cookbooks
  • Document database user creation
  • Deploy the changes in gstg
Edited by Rafael Henchen