HipChat Data Center: sslmode configuration for the Postgres client should persist over upgrades

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • Type: Suggestion
    • Resolution: Won't Fix
    • None
    • Component/s: Data Center
    • None

      Postgres over SSL is not supported yet for HipChat Data Center.

      Problem Definition

      sslmode is disabled by default in the HipChat node config in /hipchat-scm/chef-repo/cookbooks/hipchat_postgres/attributes/default.rb: 

      default[:hipchat][:postgres][:sslmode] = "disable"

      While this can be changed manually to "verify-ca" or "verify-full", the change will be undone with every upgrade since all the Chef cookbooks will be overwritten.

      Suggested Solution

      Make this change persist in configuration.json or any other deployment specific config file.

      Workaround

      Make the change manually after each upgrade of HipChat Data Center.

            Assignee:
            Unassigned
            Reporter:
            Arbi Dridi
            Archiver:
            Michael Andreacchio

              Created:
              Updated:
              Resolved:
              Archived: