Configure contacts_admin_db_admin machine class

hieradata_aws/class/backend.yaml

@@ -1,6 +1,8 @@
 ---
 
 govuk::apps::contacts::vhost: contacts-admin
+# TODO: switch to "contacts-admin-mysql" and uncomment the 'push'
+# `govuk_env_sync::tasks` tasks when we're ready to switch to the dedicated RDS instance
 govuk::apps::contacts::db_hostname: 'mysql-primary'
 govuk::apps::contacts::db_username: 'contacts'
 govuk::apps::contacts::db_password: "%{hiera('govuk::apps::contacts::db::mysql_contacts_admin')}"

hieradata_aws/class/integration/contacts_admin_db_admin.yaml

@@ -0,0 +1,25 @@
+govuk_env_sync::tasks:
+  "pull_contacts_admin_production_daily":
+    ensure: "present"
+    hour: "0"
+    minute: "0"
+    action: "pull"
+    dbms: "mysql"
+    storagebackend: "s3"
+    database: "contacts_production"
+    database_hostname: "contacts-admin-mysql"
+    temppath: "/tmp/contacts_admin_production"
+    url: "govuk-production-database-backups"
+    path: "contacts-admin-mysql"
+  # "push_contacts_admin_production_daily":
+  #   ensure: "present"
+  #   hour: "5"
+  #   minute: "0"
+  #   action: "push"
+  #   dbms: "mysql"
+  #   storagebackend: "s3"
+  #   database: "contacts_production"
+  #   database_hostname: "contacts-admin-mysql"
+  #   temppath: "/tmp/contacts_admin_production"
+  #   url: "govuk-integration-database-backups"
+  #   path: "contacts-admin-mysql"

hieradata_aws/class/production/contacts_admin_db_admin.yaml

@@ -0,0 +1,13 @@
+# govuk_env_sync::tasks:
+#   "push_contacts_admin_production_daily":
+#     ensure: "present"
+#     hour: "23"
+#     minute: "0"
+#     action: "push"
+#     dbms: "mysql"
+#     storagebackend: "s3"
+#     database: "contacts_production"
+#     database_hostname: "contacts-admin-mysql"
+#     temppath: "/tmp/contacts_admin_production"
+#     url: "govuk-production-database-backups"
+#     path: "contacts-admin-mysql"

hieradata_aws/class/staging/contacts_admin_db_admin.yaml

@@ -0,0 +1,25 @@
+govuk_env_sync::tasks:
+  "pull_contacts_admin_production_daily":
+    ensure: "present"
+    hour: "0"
+    minute: "0"
+    action: "pull"
+    dbms: "mysql"
+    storagebackend: "s3"
+    database: "contacts_production"
+    database_hostname: "contacts-admin-mysql"
+    temppath: "/tmp/contacts_admin_production"
+    url: "govuk-production-database-backups"
+    path: "contacts-admin-mysql"
+  # "push_contacts_admin_production_daily":
+  #   ensure: "present"
+  #   hour: "5"
+  #   minute: "0"
+  #   action: "push"
+  #   dbms: "mysql"
+  #   storagebackend: "s3"
+  #   database: "contacts_production"
+  #   database_hostname: "contacts-admin-mysql"
+  #   temppath: "/tmp/contacts_admin_production"
+  #   url: "govuk-staging-database-backups"
+  #   path: "contacts-admin-mysql"

modules/govuk/manifests/apps/contacts/db.pp

@@ -1,6 +1,6 @@
 # == Class: govuk::apps:contacts:db
 #
-# MySQL to store content for the Contacts app
+# MySQL to store content for the Contacts Admin app
 # https://github.com/alphagov/contacts-admin
 #
 # === Parameters

modules/govuk/manifests/node/s_contacts_admin_db_admin.pp

@@ -0,0 +1,34 @@
+# == Class: govuk_node::s_contacts_admin_db_admin
+#
+# This machine class is used to administer the Contacts Admin
+# MySQL RDS instances.
+#
+# === Parameters
+#
+# [*mysql_db_host*]
+#  The database hostname
+#
+# [*mysql_db_password*]
+#  The database password
+#
+# [*mysql_db_user*]
+#  The database user to connect to the remote database as
+#
+class govuk::node::s_contacts_admin_db_admin(
+  $mysql_db_host     = undef,
+  $mysql_db_password = undef,
+  $mysql_db_user     = undef,
+) {
+  include ::govuk::node::s_base
+  include govuk_env_sync
+
+  file { '/root/.my.cnf':
+    ensure  => 'present',
+    owner   => 'root',
+    group   => 'root',
+    content => template('govuk/mysql_my.cnf.erb'),
+  }
+
+  # include all MySQL classes that create databases and users
+  -> class { '::govuk::apps::contacts::db': }
+}