Bug 57061 - Make connection settings to memcached and postgresql configurable in self-service
Make connection settings to memcached and postgresql configurable in self-ser...
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Self Service
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-6-errata
Assigned To: Florian Best
Christian Castens
https://git.knut.univention.de/univen...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2024-02-14 18:29 CET by Florian Best
Modified: 2024-03-07 13:07 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2024-02-14 18:29:13 CET
The memache and postgresql settings in UCS are simply hardcoded to connect to the localhost databases, which don't require authentication.

For a containerized self service these settings must be configurable.
Comment 1 Florian Best univentionstaff 2024-02-20 14:35:49 CET
The memcached database settings are now configurable via the UCR variables umc/self-service/memcached/(socket|username|password-file) plus for BDI Grundschutz compatibility the password can be given via the ENV variable SELF_SERVICE_MEMCACHED_SECRET.
The postgresql database settings are now configurable via the UCR variables umc/self-service/postgresql/(hostname|port|username|database|password-file) plus for BDI Grundschutz compatibility the password can be given via the ENV variable SELF_SERVICE_DB_SECRET.

univention-self-service.yaml
bdecb09fe281 | feat(self-service): make connection properties for postgresql and memcached configurable

univention-self-service (5.0.8-1)
bdecb09fe281 | feat(self-service): make connection properties for postgresql and memcached configurable

ucs-test (10.0.20-31)
bdecb09fe281 | feat(self-service): make connection properties for postgresql and memcached configurable
Comment 2 Christian Castens univentionstaff 2024-03-01 15:06:52 CET
QA:
   advisories: OK 
   no related tests fail: OK
   new ucr vars work as intended: OK
   translations: OK
   manual test of selfservice (edit profile data): OK