#9045 Access to FAS for AAA migration
Closed: Fixed 2 years ago by kevin. Opened 2 years ago by abompard.

Hey folks,
To test our FAS to IPA migration script, we'll need some data. Since staging is down, I was wondering if we could get one (or both!) of these two things:

  • a privileged account on FAS, that has permissions to see private data
  • a DB dump of FAS, without passwords if possible. Maybe the DB dump that is used to populate the staging instance?


Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: groomed, high-gain, high-trouble

2 years ago

I think we could get you a db dump for populating staging, but is there any way you could only keep it in our machines? ie, don't download it, just work with it on our stg env? I'd prefer if it not be copies out to other places...

Yes I think I can do that. It'll mean doing development in vim, which is what I've done for most of my python life so it's fine :-)

@kevin Assuming "on our machines" means on batcave? Apart from the (cleansed) DB dump, I guess we need credentials to actually write objects in the FreeIPA instance in staging, that one seems to have been missing from this ticket.

Hmm, the fas2ipa code looks like it only works online, i.e. not from a DB dump or anything. As discussed in IRC, let's meet on Monday to sort this out.

/cc @abompard @ryanlerch

Yeah, it currently only works online, I wanted to check if we would ever be allowed to have a DB dump before implementing the direct-db import ;-)

ok, there is now a db-fas01.stg.iad2.fedoraproject.org instance that has the production db loaded in it.
You should be able to make a fas in staging openshift and sync from that. :)

I'm going to close this now as we have a plan hopefully, but feel free to re-open if there's more to do or the like. Or use #9152

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.