Request: Sandbox RDS Instance

hackoregon / civic-devops

Master collection point for issues, procedures, and code to manage the HackOregon Civic platform

MIT License

11 stars 4 forks source link

Request: Sandbox RDS Instance #237

Closed MikeTheCanuck closed 5 years ago

MikeTheCanuck commented 5 years ago

Summary

Sandbox team wants their RDS instance

Notes

Lynn talked to me (Mike Lonergan) on 2019-05-19 at Centrl and I got a clear picture that they're on deck next, so I'm queuing this ahead of the Google Doc access form that Lynn'll submit soon.

edit: formal request: https://docs.google.com/document/d/1I-TBrvENiEdXPutzuImtkSPUv8CtiBfxeRUunUrYcKQ/

Tasks

[x] Manual RDS installation
[x] Manual account creation
[x] Manual postgis addition
[x] communicate PEM file, creds, connection params and pointer to the "how to use jumpbox for RDS installs" HOWTO guide to ~~Lynn~~ Nathan

Definition of Done

Lynn's got the necessary bits above to hand off to the team's PostgreSQL admin.

MikeTheCanuck commented 5 years ago

Here's what will be manually installed:

DB instance identifier: sandbox-2019-staging Use case: dev/test (non-replicated) DB engine: PostgreSQL 11.2-R1 DB instance class: db.t2.small Allocated storage: 60GB (Lynn believes they have 52 GB of data now) VPC: public-database VPC security groups: hacko-public-database log exports: Postgresql logs published to CloudWatch Enable deletion protection All other settings at default.

MikeTheCanuck commented 5 years ago

Server address: sandbox-2019-staging.caicgny9d8nv.us-west-2.rds.amazonaws.com

Instructions for how to use jumpbox for PostgreSQL restore: https://github.com/hackoregon/civic-devops/blob/master/docs/database/2019/HOWTO:%20Use%20jumpbox%20to%20restore%20PostgreSQL%20from%20S3.md

PEM file, username and password will be distributed via Slack DM.

NOTE: the #236 step has to be manually taken after database is installed, to make postgis available to the database.

NOTE 2: the application username will have the following privileges:

Can login
Create databases
Inherit rights from the parent roles

MikeTheCanuck commented 5 years ago

Post-creation configuration steps:

create application login role via PgAdmin
add PostGIS support to all future databases via https://github.com/hackoregon/civic-devops/issues/236#issuecomment-493790287

MikeTheCanuck commented 5 years ago

creds & connectivity details shared with @nam20485 via Slack.

nam20485 commented 5 years ago

Thanks Mike, I was able to connect using the settings you provided.