)]}'
{"postgresql/templates/bin/_rotate-password.sh.tpl":[{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"226492e96b5d27d81b79d438f5dd054fe2716460","unresolved":false,"context_lines":[{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"POSTGRES_POD\u003d${POSTGRES_POD:-\"postgresql-0\"}"},{"line_number":18,"context_line":"POSTGRES_USER\u003d${POSTGRES_USER:-\"postgres\"}"},{"line_number":19,"context_line":"RETRY_TIMER\u003d${RETRY_TIMER:-\"60\"}"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"while [ /bin/true ]"},{"line_number":22,"context_line":"do"},{"line_number":23,"context_line":"  /kubectl \\"},{"line_number":24,"context_line":"    --token\u003d\"$(cat /run/secrets/kubernetes.io/serviceaccount/token)\" \\"},{"line_number":25,"context_line":"    -s \"$(KUBERNETES_PORT)\" \\"},{"line_number":26,"context_line":"    exec -n \"$NAMESPACE\" \\"},{"line_number":27,"context_line":"    \"$POSTGRES_POD\" \\"},{"line_number":28,"context_line":"    psql -U \"$POSTGRES_USER\" -c \"ALTER ROLE $POSTGRES_USER WITH PASSWORD \u0027$PGPASSWORD\u0027\""},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"  if [ $? -eq 0 ]"},{"line_number":31,"context_line":"  then"},{"line_number":32,"context_line":"    exit 0"},{"line_number":33,"context_line":"  else"},{"line_number":34,"context_line":"    echo \"Password rotation failed, sleeping to try again.\""},{"line_number":35,"context_line":"    sleep $RETRY_TIMER"},{"line_number":36,"context_line":"  fi"},{"line_number":37,"context_line":"done"}],"source_content_type":"text/x-smarty","patch_set":5,"id":"9fdfeff1_95f5f7ef","line":37,"range":{"start_line":17,"start_character":0,"end_line":37,"end_character":4},"updated":"2019-02-07 21:05:34.000000000","message":"could this not just connect to the db, or run as part of the db startup script? executing from one pod to another seems a bit gross.","commit_id":"322d3af4cf8256c4ce4065c1a176457fddccc6fe"},{"author":{"_account_id":26449,"name":"Scott Hussey","email":"sthussey@att.com","username":"sh8121"},"change_message_id":"f0ff25d4a8679bdc19a6303c5efaac9248b9d0f1","unresolved":false,"context_lines":[{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"POSTGRES_POD\u003d${POSTGRES_POD:-\"postgresql-0\"}"},{"line_number":18,"context_line":"POSTGRES_USER\u003d${POSTGRES_USER:-\"postgres\"}"},{"line_number":19,"context_line":"RETRY_TIMER\u003d${RETRY_TIMER:-\"60\"}"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"while [ /bin/true ]"},{"line_number":22,"context_line":"do"},{"line_number":23,"context_line":"  /kubectl \\"},{"line_number":24,"context_line":"    --token\u003d\"$(cat /run/secrets/kubernetes.io/serviceaccount/token)\" \\"},{"line_number":25,"context_line":"    -s \"$(KUBERNETES_PORT)\" \\"},{"line_number":26,"context_line":"    exec -n \"$NAMESPACE\" \\"},{"line_number":27,"context_line":"    \"$POSTGRES_POD\" \\"},{"line_number":28,"context_line":"    psql -U \"$POSTGRES_USER\" -c \"ALTER ROLE $POSTGRES_USER WITH PASSWORD \u0027$PGPASSWORD\u0027\""},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"  if [ $? -eq 0 ]"},{"line_number":31,"context_line":"  then"},{"line_number":32,"context_line":"    exit 0"},{"line_number":33,"context_line":"  else"},{"line_number":34,"context_line":"    echo \"Password rotation failed, sleeping to try again.\""},{"line_number":35,"context_line":"    sleep $RETRY_TIMER"},{"line_number":36,"context_line":"  fi"},{"line_number":37,"context_line":"done"}],"source_content_type":"text/x-smarty","patch_set":5,"id":"9fdfeff1_d93df92c","line":37,"range":{"start_line":17,"start_character":0,"end_line":37,"end_character":4},"in_reply_to":"9fdfeff1_95f5f7ef","updated":"2019-02-07 22:22:31.000000000","message":"Agreed. But normal password rotation assumes you know the last password. So the alternative is creating dynamic kubernetes resources so the chart know the password declared in the previous release revision.","commit_id":"322d3af4cf8256c4ce4065c1a176457fddccc6fe"},{"author":{"_account_id":26449,"name":"Scott Hussey","email":"sthussey@att.com","username":"sh8121"},"change_message_id":"5eae94c47c575383b5a4b729593576d81aa63a10","unresolved":false,"context_lines":[{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"POSTGRES_POD\u003d${POSTGRES_POD:-\"postgresql-0\"}"},{"line_number":18,"context_line":"POSTGRES_USER\u003d${POSTGRES_USER:-\"postgres\"}"},{"line_number":19,"context_line":"RETRY_TIMER\u003d${RETRY_TIMER:-\"60\"}"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"while [ /bin/true ]"},{"line_number":22,"context_line":"do"},{"line_number":23,"context_line":"  /kubectl \\"},{"line_number":24,"context_line":"    --token\u003d\"$(cat /run/secrets/kubernetes.io/serviceaccount/token)\" \\"},{"line_number":25,"context_line":"    -s \"$(KUBERNETES_PORT)\" \\"},{"line_number":26,"context_line":"    exec -n \"$NAMESPACE\" \\"},{"line_number":27,"context_line":"    \"$POSTGRES_POD\" \\"},{"line_number":28,"context_line":"    psql -U \"$POSTGRES_USER\" -c \"ALTER ROLE $POSTGRES_USER WITH PASSWORD \u0027$PGPASSWORD\u0027\""},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"  if [ $? -eq 0 ]"},{"line_number":31,"context_line":"  then"},{"line_number":32,"context_line":"    exit 0"},{"line_number":33,"context_line":"  else"},{"line_number":34,"context_line":"    echo \"Password rotation failed, sleeping to try again.\""},{"line_number":35,"context_line":"    sleep $RETRY_TIMER"},{"line_number":36,"context_line":"  fi"},{"line_number":37,"context_line":"done"}],"source_content_type":"text/x-smarty","patch_set":5,"id":"9fdfeff1_21010c07","line":37,"range":{"start_line":17,"start_character":0,"end_line":37,"end_character":4},"in_reply_to":"9fdfeff1_d93df92c","updated":"2019-02-13 21:55:03.000000000","message":"Taking a different tact might address concerns here.","commit_id":"322d3af4cf8256c4ce4065c1a176457fddccc6fe"}],"postgresql/templates/bin/_setpassword.sh.tpl":[{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"3804f639b6c207e2e2abae22814544d967f24579","unresolved":false,"context_lines":[{"line_number":28,"context_line":""},{"line_number":29,"context_line":"while [ true ]"},{"line_number":30,"context_line":"do"},{"line_number":31,"context_line":"  psql -U \"$POSTGRES_USER\" -c \"ALTER ROLE $POSTGRES_USER WITH PASSWORD \u0027$POSTGRES_PASSWORD\u0027;\""},{"line_number":32,"context_line":"  RC\u003d$?"},{"line_number":33,"context_line":"  if [[ $RC -ne 0 ]]"},{"line_number":34,"context_line":"  then"}],"source_content_type":"text/x-smarty","patch_set":11,"id":"9fdfeff1_c4531c39","line":31,"range":{"start_line":31,"start_character":2,"end_line":31,"end_character":93},"updated":"2019-02-18 21:04:42.000000000","message":"why can this not be done as part of the server startup script?\neg:\npostgres --single -D /state/dir \u003c\u003c EOF\n{{ root user management }}\nEOF","commit_id":"dda3a58286376d27a5c52d427996e8ac833462c2"},{"author":{"_account_id":26449,"name":"Scott Hussey","email":"sthussey@att.com","username":"sh8121"},"change_message_id":"f4cd4c891b185aa937fbfbbc2a2f9408edfa5978","unresolved":false,"context_lines":[{"line_number":28,"context_line":""},{"line_number":29,"context_line":"while [ true ]"},{"line_number":30,"context_line":"do"},{"line_number":31,"context_line":"  psql -U \"$POSTGRES_USER\" -c \"ALTER ROLE $POSTGRES_USER WITH PASSWORD \u0027$POSTGRES_PASSWORD\u0027;\""},{"line_number":32,"context_line":"  RC\u003d$?"},{"line_number":33,"context_line":"  if [[ $RC -ne 0 ]]"},{"line_number":34,"context_line":"  then"}],"source_content_type":"text/x-smarty","patch_set":11,"id":"9fdfeff1_fdb6938a","line":31,"range":{"start_line":31,"start_character":2,"end_line":31,"end_character":93},"in_reply_to":"9fdfeff1_c4531c39","updated":"2019-02-22 16:40:38.000000000","message":"Will try this tactic","commit_id":"dda3a58286376d27a5c52d427996e8ac833462c2"}],"postgresql/values.yaml":[{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"14154d48b148877a3595bf51b38b3be37d5686c4","unresolved":false,"context_lines":[{"line_number":19,"context_line":"release_group: null"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"pod:"},{"line_number":22,"context_line":"  security:"},{"line_number":23,"context_line":"    server:"},{"line_number":24,"context_line":"      runAsUser: 999"},{"line_number":25,"context_line":"      allowPrivilegeEscalation: false"},{"line_number":26,"context_line":"  affinity:"},{"line_number":27,"context_line":"    anti:"},{"line_number":28,"context_line":"      type:"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"9fdfeff1_b97f9f15","line":25,"range":{"start_line":22,"start_character":0,"end_line":25,"end_character":37},"updated":"2019-02-25 14:52:54.000000000","message":"we can update this once https://review.openstack.org/#/c/637345/ is merged.","commit_id":"850f7704a39f4ce58e536738a28dafe687915e4e"},{"author":{"_account_id":26449,"name":"Scott Hussey","email":"sthussey@att.com","username":"sh8121"},"change_message_id":"405851b56cb7cb143be6fc0b75176ab61a64fe16","unresolved":false,"context_lines":[{"line_number":19,"context_line":"release_group: null"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"pod:"},{"line_number":22,"context_line":"  security:"},{"line_number":23,"context_line":"    server:"},{"line_number":24,"context_line":"      runAsUser: 999"},{"line_number":25,"context_line":"      allowPrivilegeEscalation: false"},{"line_number":26,"context_line":"  affinity:"},{"line_number":27,"context_line":"    anti:"},{"line_number":28,"context_line":"      type:"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"9fdfeff1_6fa1d2f7","line":25,"range":{"start_line":22,"start_character":0,"end_line":25,"end_character":37},"in_reply_to":"9fdfeff1_b97f9f15","updated":"2019-03-04 16:11:00.000000000","message":"Any ETA on when that work will be complete and merged?","commit_id":"850f7704a39f4ce58e536738a28dafe687915e4e"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"14154d48b148877a3595bf51b38b3be37d5686c4","unresolved":false,"context_lines":[{"line_number":145,"context_line":"      scrape: true"},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"conf:"},{"line_number":148,"context_line":"  debug: true"},{"line_number":149,"context_line":"  postgresql:"},{"line_number":150,"context_line":"    max_connections: 100"},{"line_number":151,"context_line":"    shared_buffers: 128MB"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"9fdfeff1_f98e8725","line":148,"range":{"start_line":148,"start_character":9,"end_line":148,"end_character":13},"updated":"2019-02-25 14:52:54.000000000","message":"do we want this to be true by default?","commit_id":"850f7704a39f4ce58e536738a28dafe687915e4e"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"1a529294c60f33437620afc3896238043f239356","unresolved":false,"context_lines":[{"line_number":145,"context_line":"      scrape: true"},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"conf:"},{"line_number":148,"context_line":"  debug: true"},{"line_number":149,"context_line":"  postgresql:"},{"line_number":150,"context_line":"    max_connections: 100"},{"line_number":151,"context_line":"    shared_buffers: 128MB"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"9fdfeff1_6fa792be","line":148,"range":{"start_line":148,"start_character":9,"end_line":148,"end_character":13},"in_reply_to":"9fdfeff1_0ed630c4","updated":"2019-03-04 16:20:18.000000000","message":"lets set it to false - and get some secure defaults - once thats done lgtm.","commit_id":"850f7704a39f4ce58e536738a28dafe687915e4e"},{"author":{"_account_id":26449,"name":"Scott Hussey","email":"sthussey@att.com","username":"sh8121"},"change_message_id":"c6d8c65c93363fcb0f02b73a584382111f9963ef","unresolved":false,"context_lines":[{"line_number":145,"context_line":"      scrape: true"},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"conf:"},{"line_number":148,"context_line":"  debug: true"},{"line_number":149,"context_line":"  postgresql:"},{"line_number":150,"context_line":"    max_connections: 100"},{"line_number":151,"context_line":"    shared_buffers: 128MB"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"9fdfeff1_2fae6a2f","line":148,"range":{"start_line":148,"start_character":9,"end_line":148,"end_character":13},"in_reply_to":"9fdfeff1_6fa792be","updated":"2019-03-04 16:33:56.000000000","message":"My mistake, I see the password jobs now mask the password. I\u0027ve updated the default to false.","commit_id":"850f7704a39f4ce58e536738a28dafe687915e4e"},{"author":{"_account_id":26449,"name":"Scott Hussey","email":"sthussey@att.com","username":"sh8121"},"change_message_id":"405851b56cb7cb143be6fc0b75176ab61a64fe16","unresolved":false,"context_lines":[{"line_number":145,"context_line":"      scrape: true"},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"conf:"},{"line_number":148,"context_line":"  debug: true"},{"line_number":149,"context_line":"  postgresql:"},{"line_number":150,"context_line":"    max_connections: 100"},{"line_number":151,"context_line":"    shared_buffers: 128MB"}],"source_content_type":"text/x-yaml","patch_set":14,"id":"9fdfeff1_0ed630c4","line":148,"range":{"start_line":148,"start_character":9,"end_line":148,"end_character":13},"in_reply_to":"9fdfeff1_f98e8725","updated":"2019-03-04 16:11:00.000000000","message":"The behavior is true by default elsewhere since most charts use \u0027set -x\u0027 for all scripts everywhere.","commit_id":"850f7704a39f4ce58e536738a28dafe687915e4e"}]}