From f2b2d32afb4c21927daf24ca810b9fa81c6c97f9 Mon Sep 17 00:00:00 2001 From: Rens van Moorsel Date: Tue, 1 Sep 2026 09:14:03 +0200 Subject: [PATCH] Chore: Bump to postgres 14 --- ansible/group_vars/all/vars.yml | 2 +- ansible/playbooks/restore-backup.yml | 4 ++-- ansible/roles/databases/tasks/main.yml | 4 +++- 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/ansible/group_vars/all/vars.yml b/ansible/group_vars/all/vars.yml index 758c02cf..922e8584 100644 --- a/ansible/group_vars/all/vars.yml +++ b/ansible/group_vars/all/vars.yml @@ -45,4 +45,4 @@ secret_svsticky_deploy: github_pat_download_artifact: "{{ vault_secret_svsticky_deploy.github_pat_download_artifact }}" postgres: - pg_hba_path: '/etc/postgresql/13/main/pg_hba.conf' + pg_hba_path: '/etc/postgresql/14/main/pg_hba.conf' diff --git a/ansible/playbooks/restore-backup.yml b/ansible/playbooks/restore-backup.yml index b6f10e3e..48de84d0 100644 --- a/ansible/playbooks/restore-backup.yml +++ b/ansible/playbooks/restore-backup.yml @@ -91,11 +91,11 @@ label: "{{ item.stdout }}" - name: "remove all existing databases on target server" - command: "pg_dropcluster --stop 13 main" + command: "pg_dropcluster --stop 14 main" ignore_errors: true - name: "create pg cluster" - command: "pg_createcluster --start 13 main" + command: "pg_createcluster --start 14 main" - name: "restore production databases - postgres" # noqa risky-shell-pipe shell: "zcat {{ backup_restore_tmp_dir.path }}/{{ item.stdout }} | sudo -u postgres psql" diff --git a/ansible/roles/databases/tasks/main.yml b/ansible/roles/databases/tasks/main.yml index b939a774..10f69b9a 100644 --- a/ansible/roles/databases/tasks/main.yml +++ b/ansible/roles/databases/tasks/main.yml @@ -13,7 +13,7 @@ - name: "ensure postgresql is installed and manageable" ansible.builtin.apt: name: - - "postgresql-13" + - "postgresql-14" # Installs postgres 14 if not installed yet - "python3-psycopg2" - name: "Explicitly specify peer auth as default over local communication" @@ -40,6 +40,7 @@ - name: "ensure tavern user exists" community.postgresql.postgresql_user: name: "tavern" + password: "{{ secret_tavern.postgres_password }}" - name: "ensure tavern database exists" community.postgresql.postgresql_db: @@ -68,6 +69,7 @@ - name: "ensure keycloak user exists" community.postgresql.postgresql_user: name: "keycloak" + password: "{{ secret_keycloak.db_password }}" - name: "ensure keycloak database exists" community.postgresql.postgresql_db: