Respond with 429 to abusive "ping" requests

[chef.git] / cookbooks / postgresql / recipes / default.rb

diff --git a/cookbooks/postgresql/recipes/default.rb b/cookbooks/postgresql/recipes/default.rb
index 4cf4b0bda6347981f93dfb6517afb422541ee40e..47ec3e80bfffee64cc580f0b8e09747adc339fa6 100644 (file)
--- a/cookbooks/postgresql/recipes/default.rb
+++ b/cookbooks/postgresql/recipes/default.rb
@@ -1,14 +1,14 @@
 #
 #

-# Cookbook Name:: postgresql
+# Cookbook:: postgresql

 # Recipe:: default
 #
 # Recipe:: default
 #

-# Copyright 2012, OpenStreetMap Foundation
+# Copyright:: 2012, OpenStreetMap Foundation

 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #

-#     http://www.apache.org/licenses/LICENSE-2.0
+#     https://www.apache.org/licenses/LICENSE-2.0

 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,


@@ -17,12 +17,12 @@
 # limitations under the License.
 #
 
 # limitations under the License.
 #
 

-package "postgresql-common"
+include_recipe "apt"
+include_recipe "munin"
+include_recipe "prometheus"

 
 

-service "postgresql" do
-  action [ :enable, :start ]
-  supports :status => true, :restart => true, :reload => true
-end
+package "locales-all"
+package "postgresql-common"

 
 node[:postgresql][:versions].each do |version|
   package "postgresql-#{version}"
 
 node[:postgresql][:versions].each do |version|
   package "postgresql-#{version}"


@@ -37,28 +37,28 @@ node[:postgresql][:versions].each do |version|
     source "postgresql.conf.erb"
     owner "postgres"
     group "postgres"
     source "postgresql.conf.erb"
     owner "postgres"
     group "postgres"

-    mode 0644
+    mode "644"

     variables :version => version, :defaults => defaults, :settings => settings
     variables :version => version, :defaults => defaults, :settings => settings

-    notifies :reload, resources(:service => "postgresql")
+    notifies :reload, "service[postgresql]"

   end
 
   template "/etc/postgresql/#{version}/main/pg_hba.conf" do
     source "pg_hba.conf.erb"
     owner "postgres"
     group "postgres"
   end
 
   template "/etc/postgresql/#{version}/main/pg_hba.conf" do
     source "pg_hba.conf.erb"
     owner "postgres"
     group "postgres"

-    mode 0640
+    mode "640"

     variables :early_rules => settings[:early_authentication_rules] || defaults[:early_authentication_rules],
               :late_rules => settings[:late_authentication_rules] || defaults[:late_authentication_rules]
     variables :early_rules => settings[:early_authentication_rules] || defaults[:early_authentication_rules],
               :late_rules => settings[:late_authentication_rules] || defaults[:late_authentication_rules]

-    notifies :reload, resources(:service => "postgresql")
+    notifies :reload, "service[postgresql]"

   end
 
   template "/etc/postgresql/#{version}/main/pg_ident.conf" do
     source "pg_ident.conf.erb"
     owner "postgres"
     group "postgres"
   end
 
   template "/etc/postgresql/#{version}/main/pg_ident.conf" do
     source "pg_ident.conf.erb"
     owner "postgres"
     group "postgres"

-    mode 0640
+    mode "640"

     variables :maps => settings[:user_name_maps] || defaults[:user_name_maps]
     variables :maps => settings[:user_name_maps] || defaults[:user_name_maps]

-    notifies :reload, resources(:service => "postgresql")
+    notifies :reload, "service[postgresql]"

   end
 
   link "/var/lib/postgresql/#{version}/main/server.crt" do
   end
 
   link "/var/lib/postgresql/#{version}/main/server.crt" do


@@ -69,36 +69,50 @@ node[:postgresql][:versions].each do |version|
     to "/etc/ssl/private/ssl-cert-snakeoil.key"
   end
 
     to "/etc/ssl/private/ssl-cert-snakeoil.key"
   end
 

-  restore_command = settings[:restore_command] || defaults[:restore_command]

   standby_mode = settings[:standby_mode] || defaults[:standby_mode]
   standby_mode = settings[:standby_mode] || defaults[:standby_mode]

+  primary_conninfo = settings[:primary_conninfo] || defaults[:primary_conninfo]
+  restore_command = settings[:restore_command] || defaults[:restore_command]

 
   if restore_command || standby_mode == "on"
 
   if restore_command || standby_mode == "on"

+    passwords = if primary_conninfo
+                  data_bag_item(primary_conninfo[:passwords][:bag],
+                                primary_conninfo[:passwords][:item])
+                end
+

     template "/var/lib/postgresql/#{version}/main/recovery.conf" do
       source "recovery.conf.erb"
       owner "postgres"
       group "postgres"
     template "/var/lib/postgresql/#{version}/main/recovery.conf" do
       source "recovery.conf.erb"
       owner "postgres"
       group "postgres"

-      mode 0640
-      variables :defaults => defaults, :settings => settings
-      notifies :reload, resources(:service => "postgresql")
+      mode "640"
+      variables :standby_mode => standby_mode,
+                :primary_conninfo => primary_conninfo,
+                :restore_command => restore_command,
+                :passwords => passwords
+      notifies :reload, "service[postgresql]"

     end
   else
     template "/var/lib/postgresql/#{version}/main/recovery.conf" do
       action :delete
     end
   else
     template "/var/lib/postgresql/#{version}/main/recovery.conf" do
       action :delete

-      notifies :reload, resources(:service => "postgresql")
+      notifies :reload, "service[postgresql]"

     end
   end
 end
 
     end
   end
 end
 

+service "postgresql" do
+  action [:enable, :start]
+  supports :status => true, :restart => true, :reload => true
+end
+

 ohai_plugin "postgresql" do
   template "ohai.rb.erb"
 end
 
 ohai_plugin "postgresql" do
   template "ohai.rb.erb"
 end
 

-package "ptop"
+package "pgtop"

 package "libdbd-pg-perl"
 
 clusters = node[:postgresql][:clusters] || []
 
 package "libdbd-pg-perl"
 
 clusters = node[:postgresql][:clusters] || []
 

-clusters.each do |name,details|
+clusters.each do |name, details|

   suffix = name.tr("/", ":")
 
   munin_plugin "postgres_bgwriter_#{suffix}" do
   suffix = name.tr("/", ":")
 
   munin_plugin "postgres_bgwriter_#{suffix}" do


@@ -131,11 +145,32 @@ clusters.each do |name,details|
     conf_variables :port => details[:port]
   end
 
     conf_variables :port => details[:port]
   end
 

-  if File.exist?("/var/lib/postgresql/#{details[:version]}/main/recovery.conf")
-    munin_plugin "postgres_replication_#{suffix}" do
-      target "postgres_replication"
-      conf "munin.erb"
-      conf_variables :port => details[:port]
-    end
+  next unless File.exist?("/var/lib/postgresql/#{details[:version]}/main/recovery.conf")
+
+  munin_plugin "postgres_replication_#{suffix}" do
+    target "postgres_replication"
+    conf "munin.erb"
+    conf_variables :port => details[:port]

   end
 end
   end
 end

+
+uris = clusters.collect do |_, details|
+  "postgres@:#{details[:port]}/postgres?host=/run/postgresql"
+end
+
+template "/etc/prometheus/exporters/postgres_queries.yml" do
+  source "postgres_queries.yml.erb"
+  owner "root"
+  group "root"
+  mode "644"
+end
+
+prometheus_exporter "postgres" do
+  port 9187
+  user "postgres"
+  options "--extend.query-path=/etc/prometheus/exporters/postgres_queries.yml"
+  environment "DATA_SOURCE_URI" => uris.sort.uniq.first,
+              "PG_EXPORTER_AUTO_DISCOVER_DATABASES" => "true",
+              "PG_EXPORTER_EXCLUDE_DATABASES" => "postgres,template0,template1"
+  subscribes :restart, "template[/etc/prometheus/exporters/postgres_queries.yml]"
+end