87 lines
1.9 KiB
Go
87 lines
1.9 KiB
Go
package cluster
|
|
|
|
import (
|
|
"database/sql"
|
|
"fmt"
|
|
"strings"
|
|
|
|
_ "github.com/lib/pq"
|
|
|
|
"github.bus.zalan.do/acid/postgres-operator/pkg/spec"
|
|
"github.bus.zalan.do/acid/postgres-operator/pkg/util"
|
|
)
|
|
|
|
var createUserSQL = `SET LOCAL synchronous_commit = 'local'; CREATE ROLE "%s" %s %s;`
|
|
|
|
func (c *Cluster) pgConnectionString() string {
|
|
hostname := fmt.Sprintf("%s.%s.svc.cluster.local", c.Metadata.Name, c.Metadata.Namespace)
|
|
password := c.pgUsers[c.OpConfig.SuperUsername].Password
|
|
|
|
return fmt.Sprintf("host='%s' dbname=postgres sslmode=require user='%s' password='%s'",
|
|
hostname,
|
|
c.OpConfig.SuperUsername,
|
|
strings.Replace(password, "$", "\\$", -1))
|
|
}
|
|
|
|
func (c *Cluster) initDbConn() error {
|
|
//TODO: concurrent safe?
|
|
if c.pgDb == nil {
|
|
c.mu.Lock()
|
|
defer c.mu.Unlock()
|
|
if c.pgDb == nil {
|
|
conn, err := sql.Open("postgres", c.pgConnectionString())
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = conn.Ping()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
c.pgDb = conn
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (c *Cluster) createPgUser(user spec.PgUser) (isHuman bool, err error) {
|
|
var flags []string = user.Flags
|
|
|
|
if user.Password == "" {
|
|
isHuman = true
|
|
flags = append(flags, "SUPERUSER")
|
|
flags = append(flags, fmt.Sprintf("IN ROLE \"%s\"", c.OpConfig.PamRoleName))
|
|
} else {
|
|
isHuman = false
|
|
}
|
|
|
|
addLoginFlag := true
|
|
for _, v := range flags {
|
|
if v == "NOLOGIN" {
|
|
addLoginFlag = false
|
|
break
|
|
}
|
|
}
|
|
if addLoginFlag {
|
|
flags = append(flags, "LOGIN")
|
|
}
|
|
if !isHuman && user.MemberOf != "" {
|
|
flags = append(flags, fmt.Sprintf("IN ROLE \"%s\"", user.MemberOf))
|
|
}
|
|
userFlags := strings.Join(flags, " ")
|
|
userPassword := fmt.Sprintf("ENCRYPTED PASSWORD '%s'", util.PGUserPassword(user))
|
|
if user.Password == "" {
|
|
userPassword = "PASSWORD NULL"
|
|
}
|
|
query := fmt.Sprintf(createUserSQL, user.Name, userFlags, userPassword)
|
|
|
|
_, err = c.pgDb.Query(query) // TODO: Try several times
|
|
if err != nil {
|
|
err = fmt.Errorf("DB error: %s", err)
|
|
return
|
|
}
|
|
|
|
return
|
|
}
|