From a7764d0e845db524f2913b6c11c88dfd121ec522 Mon Sep 17 00:00:00 2001 From: Vladimir Shushlin Date: Mon, 24 Jun 2019 20:35:12 +0000 Subject: Renew Let's Encrypt certificates Add index for pages domain ssl auto renewal Add PagesDomain.needs_ssl_renewal scope Add cron worker for ssl renewal Add worker for ssl renewal Add pages ssl renewal worker queues settings --- ...0607145325_add_pages_domains_ssl_renew_index.rb | 25 ++++++++++++++++++++++ db/schema.rb | 1 + 2 files changed, 26 insertions(+) create mode 100644 db/migrate/20190607145325_add_pages_domains_ssl_renew_index.rb (limited to 'db') diff --git a/db/migrate/20190607145325_add_pages_domains_ssl_renew_index.rb b/db/migrate/20190607145325_add_pages_domains_ssl_renew_index.rb new file mode 100644 index 00000000000..7167accbf1e --- /dev/null +++ b/db/migrate/20190607145325_add_pages_domains_ssl_renew_index.rb @@ -0,0 +1,25 @@ +# frozen_string_literal: true + +# See http://doc.gitlab.com/ce/development/migration_style_guide.html +# for more information on how to write migrations for GitLab. + +class AddPagesDomainsSslRenewIndex < ActiveRecord::Migration[5.1] + include Gitlab::Database::MigrationHelpers + + # Set this constant to true if this migration requires downtime. + DOWNTIME = false + + INDEX_NAME = 'index_pages_domains_need_auto_ssl_renewal' + + disable_ddl_transaction! + + def up + add_concurrent_index(:pages_domains, [:certificate_source, :certificate_valid_not_after], + where: "auto_ssl_enabled = #{::Gitlab::Database.true_value}", name: INDEX_NAME) + end + + def down + remove_concurrent_index(:pages_domains, [:certificate_source, :certificate_valid_not_after], + where: "auto_ssl_enabled = #{::Gitlab::Database.true_value}", name: INDEX_NAME) + end +end diff --git a/db/schema.rb b/db/schema.rb index f6cf2ee07e3..b81558178b9 100644 --- a/db/schema.rb +++ b/db/schema.rb @@ -2334,6 +2334,7 @@ ActiveRecord::Schema.define(version: 20190620112608) do t.datetime_with_timezone "certificate_valid_not_before" t.datetime_with_timezone "certificate_valid_not_after" t.integer "certificate_source", limit: 2, default: 0, null: false + t.index ["certificate_source", "certificate_valid_not_after"], name: "index_pages_domains_need_auto_ssl_renewal", where: "(auto_ssl_enabled = true)", using: :btree t.index ["domain"], name: "index_pages_domains_on_domain", unique: true, using: :btree t.index ["project_id", "enabled_until"], name: "index_pages_domains_on_project_id_and_enabled_until", using: :btree t.index ["project_id"], name: "index_pages_domains_on_project_id", using: :btree -- cgit v1.2.1