Distribution EOLE » Modules » Zéphir

SaltStack: create a dedicated role for salt-master with sqitch

Waiting for a proper way to handle such need, I create the role
directly with sqitch like before.

Ref: #23526

• services/saltmaster/migrations/deploy/salt-runner-db.sql: create the
  role and grant privileges.

• services/saltmaster/migrations/revert/salt-runner-db.sql: revoke
  privileges and drop the dedicated role.

• services/saltmaster/migrations/verify/salt-runner-db.sql: verify
  that the dedicated role can insert in the tables.

Ref: #23606

Vault: grant login to database admin

The creation of role by sqitch is not working because the temporary
user created by Vault does not have the “CREATEROLE” privilege.

In the mean time we autorise the database administrator to login
without password.

Ref: #23606

SaltStack: do not create a dedicated role with sqitch

The creation of role by sqitch is not working because the temporary
user created by Vault does not have the “CREATEROLE” privilege.

Ref: #23606

SaltStack: switch role before creating objects

Ref: #23606

SaltStack: configure container loggin level

• services/saltmaster/containerpilot.json5: use environment variable
  “CONTAINERPILOT_LOGLEVEL”.

Ref: #23606