[ARVADOS] updated: 2.1.0-2006-g4d6c3aec9

[Git user]

Summary of changes:
 .../single_hostname/pillars/postgresql.sls            | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

       via  4d6c3aec922838e8ad25b6b8ce229bf607a14de0 (commit)
      from  f258b604f831bb3bd7fab506c670b975ae8e4118 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit 4d6c3aec922838e8ad25b6b8ce229bf607a14de0
Author: Javier Bértoli <jbertoli at curii.com>
Date:   Thu Mar 3 20:27:48 2022 -0300

    18830: fix installer's postgresql pillar for single-host / single-hostname
    
    Arvados-DCO-1.1-Signed-off-by: Javier Bértoli <jbertoli at curii.com>

diff --git a/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls b/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
index caafb7b2d..7f4a9ca71 100644
--- a/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
+++ b/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
@@ -5,11 +5,30 @@
 
 ### POSTGRESQL
 postgres:
+  # Centos-7's postgres package is too old, so we need to force using upstream's
+  # This is not required in Debian's family as they already ship with PG +11
+  {%- if salt['grains.get']('os_family') == 'RedHat' %}
+  use_upstream_repo: true
+  version: '12'
+
+  pkgs_deps:
+    - libicu
+    - libxslt
+    - systemd-sysv
+
+  pkgs_extra:
+    - postgresql12-contrib
+
+  {%- else %}
   use_upstream_repo: false
   pkgs_extra:
     - postgresql-contrib
+  {%- endif %}
   postgresconf: |-
     listen_addresses = '*'  # listen on all interfaces
+    #ssl = on
+    #ssl_cert_file = '/etc/ssl/certs/arvados-snakeoil-cert.pem'
+    #ssl_key_file = '/etc/ssl/private/arvados-snakeoil-cert.key'
   acls:
     - ['local', 'all', 'postgres', 'peer']
     - ['local', 'all', 'all', 'peer']

-----------------------------------------------------------------------


hooks/post-receive
--