-
Notifications
You must be signed in to change notification settings - Fork 209
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[SUSTAIN-632] Do not update the users table to contain the public key.
The keys table should be the only source of truth New insert/updates to the users table will insert a sentinel value in the public_key column. The old values are left as is. Triggers will act only on the values in the users.public_key that are not the sentinel value. Signed-off-by: Prajakta Purohit <[email protected]>
1 parent
3c916eb
commit 36ed4d0
Showing
15 changed files
with
278 additions
and
74 deletions.
There are no files selected for viewing
10 changes: 10 additions & 0 deletions
10
omnibus/files/private-chef-upgrades/001/034_create_and_update_user.rb
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| define_upgrade do | ||
|
|
||
| if Partybus.config.bootstrap_server | ||
| must_be_data_master | ||
|
|
||
| # schema update no longer insert public_key in users table. | ||
| # the keys table is the only source of truth | ||
| run_sqitch('@sentinel_public_key_for_users', 'oc_erchef') | ||
| end | ||
| end |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,90 @@ | ||
| -- Deploy enterprise_chef:create_and_update_users to pg | ||
| -- Inserts a sentinel value into the public_key field of a user table. | ||
| -- Ensures keys table is the only source of truth for public_key | ||
|
|
||
| BEGIN; | ||
|
|
||
| DROP FUNCTION If EXISTS add_user(character,character,text,text,text,integer,text,text,password_hash_type,character,timestamp without time zone,timestamp without time zone,text,boolean,text,boolean); | ||
|
|
||
| CREATE OR REPLACE FUNCTION add_user(p_id users.id%TYPE, | ||
| p_authz_id users.authz_id%TYPE, | ||
| p_username users.username%TYPE, | ||
| p_email users.email%TYPE, | ||
| p_public_key users.public_key%TYPE, | ||
| p_pubkey_version users.pubkey_version%TYPE, | ||
| p_hashed_password users.hashed_password%TYPE, | ||
| p_salt users.salt%TYPE, | ||
| p_hash_type users.hash_type%TYPE, | ||
| p_last_updated_by users.last_updated_by%TYPE, | ||
| p_created_at users.created_at%TYPE, | ||
| p_updated_at users.updated_at%TYPE, | ||
| p_external_authentication_uid users.external_authentication_uid%TYPE, | ||
| p_recovery_authentication_enabled users.recovery_authentication_enabled%TYPE, | ||
| p_serialized_object users.serialized_object%TYPE, | ||
| p_admin users.admin%TYPE) RETURNS void AS $$ | ||
| BEGIN | ||
| INSERT INTO users | ||
| (id, authz_id, username, email, public_key, hashed_password, salt, hash_type, | ||
| last_updated_by, created_at, updated_at, external_authentication_uid, | ||
| recovery_authentication_enabled, serialized_object, admin, | ||
| pubkey_version) | ||
| VALUES (p_id, p_authz_id, p_username, p_email, 'thisisnotakey', | ||
| p_hashed_password, p_salt, p_hash_type, p_last_updated_by, p_created_at, p_updated_at, | ||
| p_external_authentication_uid, p_recovery_authentication_enabled, | ||
| p_serialized_object, p_admin, p_pubkey_version); | ||
| IF p_public_key != 'thisisnotakey' THEN | ||
| INSERT INTO keys | ||
| (id, key_name, public_key, key_version, created_at, expires_at) | ||
| VALUES | ||
| (p_id, 'default', p_public_key, p_pubkey_version, now(), 'infinity'::timestamp); | ||
| END IF; | ||
| END | ||
| $$ LANGUAGE plpgsql; | ||
|
|
||
| DROP FUNCTION IF EXISTS update_user(integer,text,text,text,password_hash_type,text,text,boolean,text,text,character,timestamp without time zone,boolean,character); | ||
|
|
||
| CREATE OR REPLACE FUNCTION update_user(p_pubkey_version users.pubkey_version%TYPE, | ||
| p_public_key users.public_key%TYPE, | ||
| p_hashed_password users.hashed_password%TYPE, | ||
| p_salt users.salt%TYPE, | ||
| p_hash_type users.hash_type%TYPE, | ||
| p_serialized_object users.serialized_object%TYPE, | ||
| p_external_authentication_uid users.external_authentication_uid%TYPE, | ||
| p_recovery_authentication_enabled users.recovery_authentication_enabled%TYPE, | ||
| p_email users.email%TYPE, | ||
| p_username users.username%TYPE, | ||
| p_last_updated_by users.last_updated_by%TYPE, | ||
| p_updated_at users.updated_at%TYPE, | ||
| p_admin users.admin%TYPE, | ||
| p_id character(32)) RETURNS void AS $update_user$ | ||
| BEGIN | ||
| IF p_public_key != 'thisisnotakey' THEN | ||
| IF p_public_key IS NOT NULL THEN | ||
| UPDATE keys SET public_key = p_public_key, | ||
| key_version = p_pubkey_version, | ||
| expires_at = 'infinity'::timestamp | ||
| WHERE id = p_id AND key_name = 'default'; | ||
| INSERT INTO keys (id, key_name, public_key, key_version, created_at, expires_at) | ||
| SELECT p_id, 'default', p_public_key, p_pubkey_version, now(), 'infinity'::timestamp | ||
| WHERE NOT EXISTS (SELECT 1 FROM keys WHERE id = p_id AND key_name = 'default'); | ||
| ELSE | ||
| DELETE FROM keys WHERE id = p_id AND key_name = 'default'; | ||
| END IF; | ||
| END IF; | ||
| UPDATE users SET | ||
| public_key = 'thisisnotakey', | ||
| hashed_password = p_hashed_password, | ||
| salt = p_salt, | ||
| hash_type = p_hash_type, | ||
| last_updated_by = p_last_updated_by, | ||
| updated_at = p_updated_at, | ||
| external_authentication_uid = p_external_authentication_uid, | ||
| recovery_authentication_enabled = p_recovery_authentication_enabled, | ||
| serialized_object = p_serialized_object, | ||
| admin = p_admin, | ||
| pubkey_version = p_pubkey_version | ||
| WHERE id = p_id; | ||
| END | ||
| $update_user$ LANGUAGE plpgsql; | ||
|
|
||
| COMMIT; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
45 changes: 45 additions & 0 deletions
45
src/oc_erchef/schema/deploy/keys_update_trigger@users_email_functional_index.sql
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,45 @@ | ||
| -- Deploy keys_update_trigger | ||
| -- | ||
| -- This keeps the keys table consistent when the clients and user tables update their keys | ||
| -- | ||
| BEGIN; | ||
|
|
||
| CREATE OR REPLACE FUNCTION add_key() RETURNS TRIGGER AS $add_key$ | ||
| BEGIN | ||
| IF NEW.public_key IS NOT NULL THEN | ||
| INSERT INTO keys | ||
| (id, key_name, public_key, key_version, created_at, expires_at) VALUES | ||
| (NEW.id, 'default', NEW.public_key, NEW.pubkey_version, now(), 'infinity'::timestamp); | ||
| END IF; | ||
| RETURN NULL; -- result is ignored since this is an AFTER trigger | ||
| END; | ||
| $add_key$ LANGUAGE plpgsql; | ||
|
|
||
| CREATE OR REPLACE FUNCTION update_key() RETURNS TRIGGER AS $update_key$ | ||
| BEGIN | ||
| IF NEW.public_key IS NOT NULL THEN | ||
| UPDATE keys SET public_key = NEW.public_key, key_version = NEW.pubkey_version, expires_at = 'infinity'::timestamp | ||
| WHERE id = NEW.id AND key_name = 'default'; | ||
| INSERT INTO keys (id, key_name, public_key, key_version, created_at, expires_at) | ||
| SELECT NEW.id, 'default', NEW.public_key, NEW.pubkey_version, now(), 'infinity'::timestamp | ||
| WHERE NOT EXISTS (SELECT 1 FROM keys WHERE id = NEW.id AND key_name = 'default'); | ||
| ELSE | ||
| DELETE FROM keys WHERE id = NEW.id AND key_name = 'default'; | ||
| END IF; | ||
| RETURN NULL; -- result is ignored since this is an AFTER trigger | ||
| END; | ||
| $update_key$ LANGUAGE plpgsql; | ||
|
|
||
| DROP TRIGGER IF EXISTS add_key ON clients; | ||
| DROP TRIGGER IF EXISTS update_key ON clients; | ||
|
|
||
| DROP TRIGGER IF EXISTS add_key ON users; | ||
| DROP TRIGGER IF EXISTS update_key ON users; | ||
|
|
||
| CREATE TRIGGER add_key AFTER INSERT ON clients FOR EACH ROW EXECUTE PROCEDURE add_key(); | ||
| CREATE TRIGGER update_key AFTER UPDATE ON clients FOR EACH ROW EXECUTE PROCEDURE update_key(); | ||
|
|
||
| CREATE TRIGGER add_key AFTER INSERT ON users FOR EACH ROW EXECUTE PROCEDURE add_key(); | ||
| CREATE TRIGGER update_key AFTER UPDATE ON users FOR EACH ROW EXECUTE PROCEDURE update_key(); | ||
|
|
||
| COMMIT; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| -- Revert enterprise_chef:create_and_update_users from pg | ||
|
|
||
| BEGIN; | ||
|
|
||
| DROP FUNCTION IF EXISTS add_user(); | ||
| DROP FUNCTION IF EXISTS update_user(); | ||
|
|
||
| COMMIT; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,14 +1,45 @@ | ||
| -- Revert keys_update_trigger | ||
|
|
||
| -- | ||
| -- This keeps the keys table consistent when the clients and user tables update their keys | ||
| -- | ||
| BEGIN; | ||
|
|
||
| CREATE OR REPLACE FUNCTION add_key() RETURNS TRIGGER AS $add_key$ | ||
| BEGIN | ||
| IF NEW.public_key IS NOT NULL THEN | ||
| INSERT INTO keys | ||
| (id, key_name, public_key, key_version, created_at, expires_at) VALUES | ||
| (NEW.id, 'default', NEW.public_key, NEW.pubkey_version, now(), 'infinity'::timestamp); | ||
| END IF; | ||
| RETURN NULL; -- result is ignored since this is an AFTER trigger | ||
| END; | ||
| $add_key$ LANGUAGE plpgsql; | ||
|
|
||
| CREATE OR REPLACE FUNCTION update_key() RETURNS TRIGGER AS $update_key$ | ||
| BEGIN | ||
| IF NEW.public_key IS NOT NULL THEN | ||
| UPDATE keys SET public_key = NEW.public_key, key_version = NEW.pubkey_version, expires_at = 'infinity'::timestamp | ||
| WHERE id = NEW.id AND key_name = 'default'; | ||
| INSERT INTO keys (id, key_name, public_key, key_version, created_at, expires_at) | ||
| SELECT NEW.id, 'default', NEW.public_key, NEW.pubkey_version, now(), 'infinity'::timestamp | ||
| WHERE NOT EXISTS (SELECT 1 FROM keys WHERE id = NEW.id AND key_name = 'default'); | ||
| ELSE | ||
| DELETE FROM keys WHERE id = NEW.id AND key_name = 'default'; | ||
| END IF; | ||
| RETURN NULL; -- result is ignored since this is an AFTER trigger | ||
| END; | ||
| $update_key$ LANGUAGE plpgsql; | ||
|
|
||
| DROP TRIGGER IF EXISTS add_key ON clients; | ||
| DROP TRIGGER IF EXISTS update_key ON clients; | ||
|
|
||
| DROP TRIGGER IF EXISTS add_key ON users; | ||
| DROP TRIGGER IF EXISTS update_key ON users; | ||
|
|
||
| DROP FUNCTION IF EXISTS add_key(); | ||
| DROP FUNCTION IF EXISTS update_key(); | ||
| CREATE TRIGGER add_key AFTER INSERT ON clients FOR EACH ROW EXECUTE PROCEDURE add_key(); | ||
| CREATE TRIGGER update_key AFTER UPDATE ON clients FOR EACH ROW EXECUTE PROCEDURE update_key(); | ||
|
|
||
| CREATE TRIGGER add_key AFTER INSERT ON users FOR EACH ROW EXECUTE PROCEDURE add_key(); | ||
| CREATE TRIGGER update_key AFTER UPDATE ON users FOR EACH ROW EXECUTE PROCEDURE update_key(); | ||
|
|
||
| COMMIT; |
14 changes: 14 additions & 0 deletions
14
src/oc_erchef/schema/revert/keys_update_trigger@users_email_functional_index.sql
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| -- Revert keys_update_trigger | ||
|
|
||
| BEGIN; | ||
|
|
||
| DROP TRIGGER IF EXISTS add_key ON clients; | ||
| DROP TRIGGER IF EXISTS update_key ON clients; | ||
|
|
||
| DROP TRIGGER IF EXISTS add_key ON users; | ||
| DROP TRIGGER IF EXISTS update_key ON users; | ||
|
|
||
| DROP FUNCTION IF EXISTS add_key(); | ||
| DROP FUNCTION IF EXISTS update_key(); | ||
|
|
||
| COMMIT; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| -- Verify enterprise_chef:create_and_update_users on pg | ||
|
|
||
| BEGIN; | ||
|
|
||
| -- XXX Add verifications here. | ||
|
|
||
| ROLLBACK; |
7 changes: 7 additions & 0 deletions
7
src/oc_erchef/schema/verify/keys_update_trigger@users_email_functional_index.sql
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| -- Verify keys_update_trigger | ||
|
|
||
| BEGIN; | ||
|
|
||
| -- XXX Add verifications here. | ||
|
|
||
| ROLLBACK; |