create option to explicitly unlock users

Author: MichaelMraka

database_admin/config.go

@@ -13,6 +13,8 @@ var (
 	resetSchema = utils.PodConfig.GetBool("reset_schema", false)
 	// Create users and update their password
 	updateUsers = utils.PodConfig.GetBool("update_users", false)
+	// Unlock users
+	unlockUsers = utils.PodConfig.GetBool("unlock_users", false)
 	// rerun config.sql
 	updateDBConfig = utils.PodConfig.GetBool("update_db_config", false)
 )

database_admin/update.go

@@ -65,19 +65,27 @@ func setPgEnv() {
 	os.Setenv("PGSSLROOTCERT", utils.CoreCfg.DBSslRootCert)
 }
 
-func startMigration(conn database.Driver, db *sql.DB, migrationFilesURL string) {
-	log.Info("Blocking writing users during the migration")
+func lockUsers(db *sql.DB) {
 	execOrPanic(db, "ALTER USER listener NOLOGIN")
 	execOrPanic(db, "ALTER USER evaluator NOLOGIN")
 	execOrPanic(db, "ALTER USER vmaas_sync NOLOGIN")
+}
+
+func unlockUsers(db *sql.DB) {
+	execOrPanic(db, "ALTER USER listener LOGIN")
+	execOrPanic(db, "ALTER USER evaluator LOGIN")
+	execOrPanic(db, "ALTER USER vmaas_sync LOGIN")
+}
+
+func startMigration(conn database.Driver, db *sql.DB, migrationFilesURL string) {
+	log.Info("Blocking writing users during the migration")
+	lockUsers(db)
 	waitForSessionClosed(db)
 
 	MigrateUp(conn, migrationFilesURL)
 
 	log.Info("Reverting components privileges")
-	execOrPanic(db, "ALTER USER listener LOGIN")
-	execOrPanic(db, "ALTER USER evaluator LOGIN")
-	execOrPanic(db, "ALTER USER vmaas_sync LOGIN")
+	unlockUsers(db)
 }
 
 func dbConn() (database.Driver, *sql.DB) {
@@ -114,6 +122,11 @@ func UpdateDB(migrationFilesURL string) {
 		execFromFile(db, "./database_admin/schema/create_users.sql")
 	}
 
+	if unlockUsers {
+		log.Info("Unlocking application components users")
+		unlockUsers(db)
+	}
+
 	switch action := migrateAction(conn, migrationFilesURL); action {
 	case BLOCK:
 		// sleep until next deployment