Merge ~pappacena/launchpad:db-patch-lp-signing-integration into launchpad:db-devel

[Thiago F. Pappacena]

Database patch for signing service integration tables.

[Colin Watson (cjwatson)]

review: Needs Fixing

e077c2a... by Thiago F. Pappacena on 2020-02-27

Refactoring ArchiveSigningKey to make sure we don't have duplicated key_types for a given archive/distroseries

[Thiago F. Pappacena (pappacena)]

Pushing requested changes.

[Colin Watson (cjwatson)]

review: Approve (db)

7f15d04... by Thiago F. Pappacena on 2020-03-02

renaming index and reordering keys

diff --git a/database/schema/patch-2210-12-0.sql b/database/schema/patch-2210-12-0.sql
new file mode 100644
index 0000000..f459287
--- /dev/null
+++ b/database/schema/patch-2210-12-0.sql
@@ -0,0 +1,45 @@
+-- Copyright 2020 Canonical Ltd.  This software is licensed under the
+-- GNU Affero General Public License version 3 (see the file LICENSE).
+
+SET client_min_messages=ERROR;
+
+
+CREATE TABLE signingkey (
+    id serial PRIMARY KEY,
+    key_type integer NOT NULL,
+    description text,
+    fingerprint text NOT NULL,
+    public_key bytea NOT NULL,
+    date_created timestamp without time zone NOT NULL
+        DEFAULT (CURRENT_TIMESTAMP AT TIME ZONE 'UTC'),
+
+    -- This unique constraint is needed because ArchiveSigningKey has a
+    -- compound foreign key using both columns.
+    CONSTRAINT signingkey__id__key_type__key
+        UNIQUE(id, key_type),
+
+    CONSTRAINT signingkey__key_type__fingerprint__key
+        UNIQUE (key_type, fingerprint)
+);
+
+
+CREATE TABLE archivesigningkey (
+    id serial PRIMARY KEY,
+    archive integer NOT NULL REFERENCES archive,
+    earliest_distro_series integer REFERENCES distroseries,
+    key_type integer NOT NULL,
+    signing_key integer NOT NULL,
+    date_created timestamp without time zone NOT NULL
+        DEFAULT (CURRENT_TIMESTAMP AT TIME ZONE 'UTC'),
+
+    CONSTRAINT archivesigningkey__signing_key__fk
+        FOREIGN KEY (signing_key, key_type)
+        REFERENCES signingkey (id, key_type),
+
+    CONSTRAINT archivesigningkey__archive__key_type__earliest_distro_series__key
+        UNIQUE(archive, key_type, earliest_distro_series)
+);
+
+
+INSERT INTO LaunchpadDatabaseRevision VALUES (2210, 12, 0);
+
diff --git a/database/schema/security.cfg b/database/schema/security.cfg
index 306d206..c406105 100644
--- a/database/schema/security.cfg
+++ b/database/schema/security.cfg
@@ -1200,6 +1200,7 @@ public.account                          = SELECT, INSERT, UPDATE
 public.archive                          = SELECT, INSERT, UPDATE
 public.archivearch                      = SELECT, INSERT, UPDATE, DELETE
 public.archivejob                       = SELECT, INSERT
+public.archivesigningkey                = SELECT, INSERT, UPDATE
 public.binarypackagebuild               = SELECT, INSERT, UPDATE
 public.binarypackagefile                = SELECT, INSERT, UPDATE
 public.binarypackagename                = SELECT, INSERT, UPDATE
@@ -1277,6 +1278,7 @@ public.project                          = SELECT, INSERT, UPDATE
 public.section                          = SELECT, INSERT, UPDATE
 public.sectionselection                 = SELECT, INSERT, UPDATE
 public.signedcodeofconduct              = SELECT, INSERT, UPDATE
+public.signingkey                       = SELECT, INSERT, UPDATE
 public.sourcepackageformatselection     = SELECT, INSERT
 public.sourcepackagename                = SELECT, INSERT, UPDATE
 public.sourcepackagepublishinghistory   = SELECT, INSERT, UPDATE
@@ -1370,6 +1372,7 @@ public.archivearch                      = SELECT, INSERT, UPDATE
 public.archivefile                      = SELECT
 public.archivejob                       = SELECT, INSERT
 public.archivepermission                = SELECT
+public.archivesigningkey                = SELECT, INSERT
 public.binarypackagebuild               = SELECT, INSERT, UPDATE
 public.binarypackagefile                = SELECT, INSERT
 public.binarypackagename                = SELECT, INSERT
@@ -1464,6 +1467,7 @@ public.snapbuild                        = SELECT, UPDATE
 public.snapbuildjob                     = SELECT, INSERT, UPDATE
 public.snapfile                         = SELECT, INSERT, UPDATE
 public.snappyseries                     = SELECT
+public.signingkey                       = SELECT, INSERT
 public.sourcepackageformatselection     = SELECT
 public.sourcepackagename                = SELECT, INSERT
 public.sourcepackagepublishinghistory   = SELECT, INSERT