You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
92 lines
2.4 KiB
92 lines
2.4 KiB
#!/bin/bash
|
|
|
|
## When writing relation script, remember:
|
|
## - they should be idempotents
|
|
## - they can be launched while the dockers is already up
|
|
## - they are launched from the host
|
|
## - the target of the link is launched first, and get a chance to ``relation-set``
|
|
## - both side of the scripts get to use ``relation-get``.
|
|
|
|
|
|
DBNAME=$(relation-get dbname) || {
|
|
DBNAME="$BASE_SERVICE_NAME"
|
|
relation-set dbname "$DBNAME"
|
|
}
|
|
|
|
USER=$(relation-get user) || {
|
|
USER="$BASE_SERVICE_NAME"
|
|
relation-set user "$USER"
|
|
}
|
|
|
|
. lib/common
|
|
|
|
set -e
|
|
|
|
## YYY: check that password was not already generated/set for the same user
|
|
## use session state storage.
|
|
|
|
## is there a previous password set for user $USER ?
|
|
|
|
NO_PREVIOUS_PASS=
|
|
PREVIOUS_PASSWORD_PATH="$state_tmpdir/$SERVICE_NAME/pwd/$USER"
|
|
PREVIOUS_PASSWORD=$(cat "$PREVIOUS_PASSWORD_PATH" 2>/dev/null) || NO_PREVIOUS_PASS=true
|
|
|
|
if PASSWORD="$(relation-get password 2>/dev/null)"; then
|
|
if [ -z "$NO_PREVIOUS_PASS" -a "$PREVIOUS_PASSWORD" != "$PASSWORD" ]; then
|
|
die "Inconsistent password specification for user '$USER' on ${DARKYELLOW}$TARGET_SERVICE_NAME$NORMAL."
|
|
fi
|
|
else
|
|
if [ "$PREVIOUS_PASSWORD" ]; then
|
|
PASSWORD="${PREVIOUS_PASSWORD}"
|
|
else
|
|
PASSWORD="$(gen_password)"
|
|
info "Generated a new password for user '$USER'."
|
|
fi
|
|
fi
|
|
|
|
|
|
array_read-0 extensions < <(relation-get extensions 2>/dev/null | shyaml get-values-0)
|
|
|
|
ensure_db_docker_running
|
|
|
|
## XXXvlab: should send all these into only one docker...
|
|
if ! db_has_database "$DBNAME"; then
|
|
db_create "$DBNAME" || exit 1
|
|
fi
|
|
if [ "${#extensions[@]}" -gt 0 ]; then
|
|
db_install_extensions "$DBNAME" "${extensions[@]}" || exit 1
|
|
fi
|
|
if ! db_has_user "$USER"; then
|
|
info "Creating a new user $USER."
|
|
db_create_user "$USER" "$PASSWORD" || exit 1
|
|
else
|
|
info "Updating password of user $USER."
|
|
db_change_password "$USER" "$PASSWORD" || exit 1
|
|
fi
|
|
|
|
db_grant_rights "$DBNAME" "$USER"
|
|
info "Granted rights on database '$DBNAME' to user '$USER'."
|
|
|
|
|
|
##
|
|
## PGPASS
|
|
##
|
|
|
|
pgpass_line="*:*:*:$USER:$PASSWORD"
|
|
pgpass_file="$CONFIGSTORE/$BASE_SERVICE_NAME/root/.pgpass"
|
|
|
|
if [ -e "$pgpass_file" ]; then
|
|
sed -ri "/^.+:.+:.+:$USER:.*$/d" "$pgpass_file"
|
|
fi
|
|
mkdir -p "$(dirname "$pgpass_file")"
|
|
echo "$pgpass_line" >> "$pgpass_file"
|
|
chmod 600 "$pgpass_file"
|
|
|
|
|
|
##
|
|
## Saving password
|
|
##
|
|
|
|
relation-set password "$PASSWORD"
|
|
mkdir -p "$(dirname "$PREVIOUS_PASSWORD_PATH")"
|
|
echo "$PASSWORD" > "$PREVIOUS_PASSWORD_PATH"
|