Sharing a DB user password among units of the app

Andreas Hasenack andreas at canonical.com
Mon Mar 24 13:01:59 UTC 2014


On Mon, Nov 4, 2013 at 7:50 AM, Stuart Bishop
<stuart.bishop at canonical.com> wrote:
> On Tue, Oct 29, 2013 at 7:38 PM, Andreas Hasenack <andreas at canonical.com> wrote:
>
>> When the first unit of the app comes up, it creates a random password and
>> uses the DB admin user to create an unprivileged DB user with that password.
>
> Do you know why the client service needs to create the user, rather
> than using users created by the PostgreSQL charm? Database roles can

(old thread)

We need 2 database users and 6 databases. Used to be 3 database users
even. And we can have as many as 5 different juju services needing
those credentials.

But the kicker reason is we can't use a random DB username. Although
we have a configuration setting for its name for the app to use at
runtime, the hundreds of database upgrade patches we have assume a
hardcoded user all over the place. :(



More information about the Juju mailing list