© 2016 DataNexus Inc.

Role Name

Builds a stand-alone EDB database with SSL connectivity. If multiple servers have been provisioned and tagged with "Role:master" and "Role:replica" then a streaming master-replica will be provisioned.

Role Variables

application: postgresql
postgresql_version: "9.2.18-1.el7"
python_postgres_adapter_version: "2.5.1-3.el7"
postgresql_package_list:
  - "python-psycopg2-{{ python_postgres_adapter_version }}"
  - "postgresql-{{ postgresql_version }}"
  - "postgresql-server-{{ postgresql_version }}"
  - "postgresql-contrib-{{ postgresql_version }}"
  - "postgresql-libs-{{ postgresql_version }}"
postgresql_data_dir: "/data/pgsql"
postgresql_home_dir: "/var/lib/pgsql"
postgresql_bin_path: "/usr/bin"
postgresql_config_path: "{{ postgresql_data_dir }}"
postgresql_daemon: postgresql
postgresql_interface: eth1
ansible_ssh_private_key_file: "aws_{{ hostvars[inventory_hostname].ec2_key_name }}_private_key.pem"

Dependencies

Instances must be tagged:

Cloud
Tenant
Project
Domain
Application
[Role]

Playbook

The site.yml playbook contains the necessary code to provision either an individual server or a master-replica pair.

Call like the playbook like this:

AWS_PROFILE=PROFILE ansible-playbook -e "project=PROJECT application=postgresql domain=DOMAIN  host_inventory=tag_Application_{{ application }} ansible_user=USER" site.yml

where:

PROFILE is your ~/.aws/credentials profile

and

PROJECT is the project name
DOMAIN is the domain: development or production or similar
USER is the instance login, ec2-user, redhat, centos, etc

The command that was used during development and testing on OSP was:

AWS_PROFILE=datanexus ./provision-postgresql -i inventory -e "cloud=osp ec2_region=regionOne application=postgresql domain=development project=demo tenant=dev key_path=/tmp ansible_user=cloud-user tenant_config_path=../"

Testing

To verify that both SSL and replication are working run the test playbook:

AWS_PROFILE=datanexus ansible-playbook -e "project=demo application=edb domain=development  host_inventory=tag_Application_{{ application }} ansible_user=centos" test.yml

Log into the replica node via SSH and verify the test table was replicated.

 $ sudo -i -u enterprisedb psql -c "select count(*) from t_random"
 count
-------
   500
(1 row)

To verify SSL, from the replica machine log into MASTER_IP using the replicator role and postgres database :

$ sudo -i -u enterprisedb psql -h MASTER_IP -U replicator postgres
psql (9.2.18)
SSL connection (cipher: DHE-RSA-AES256-GCM-SHA384, bits: 256)
Type "help" for help.

edb=>

License

Apache

Author Information

Christopher Keller @ DataNexus