Skip to content

cassandra: Activate the authentication on the production cluster

Vincent Sellier requested to merge cassandra-authentication into production

It will be active only after a restart of the nodes

Related to swh/infra/sysadm-environment#4824 (closed)

octocatalog-diff 
~/src/swh/puppet-environment master* ⇣⇡ 15s ❯ bin/octocatalog-diff cassandra1 cassandra01                                                                                                                                                               19:10:36
Found host cassandra1.internal.staging.swh.network
Found host cassandra01.internal.softwareheritage.org
Cloning into '/tmp/swh-ocd.d0CHqYha/swh-site'...
done.
Branch 'staging' set up to track remote branch 'staging' from 'origin'.
Switched to a new branch 'staging'
Cloning into '/tmp/swh-ocd.d0CHqYha/environments/production/data/private'...
done.
Cloning into '/tmp/swh-ocd.d0CHqYha/environments/staging/data/private'...
done.
*** Running octocatalog-diff on host cassandra1.internal.staging.swh.network
I, [2023-08-29T19:14:12.427241 #112736]  INFO -- : Catalogs compiled for cassandra1.internal.staging.swh.network
I, [2023-08-29T19:14:12.910287 #112736]  INFO -- : Diffs computed for cassandra1.internal.staging.swh.network
I, [2023-08-29T19:14:12.910331 #112736]  INFO -- : No differences
*** End octocatalog-diff on cassandra1.internal.staging.swh.network
*** Running octocatalog-diff on host cassandra01.internal.softwareheritage.org
I, [2023-08-29T19:14:18.630101 #112825]  INFO -- : Catalogs compiled for cassandra01.internal.softwareheritage.org
I, [2023-08-29T19:14:19.077133 #112825]  INFO -- : Diffs computed for cassandra01.internal.softwareheritage.org
diff origin/production/cassandra01.internal.softwareheritage.org current/cassandra01.internal.softwareheritage.org
*******************************************
  File[/etc/cassandra/instance1/cassandra.yaml] =>
   parameters =>
     content =>
      @@ -39,4 +39,4 @@
         parameters:
         - seeds: cassandra01.internal.softwareheritage.org:7000
      -authenticator: AllowAllAuthenticator
      -authorizer: AllowAllAuthorizer
      +authenticator: PasswordAuthenticator
      +authorizer: CassandraAuthorizer
*******************************************
  Profile::Cassandra::Instance[instance1] =>
   parameters =>
     config =>
       authenticator =>
        + PasswordAuthenticator
       authorizer =>
        + CassandraAuthorizer
*******************************************
*** End octocatalog-diff on cassandra01.internal.softwareheritage.org

Merge request reports