Dear Euler,
>
Remember the target server was a standby (read only access). I don't expect an
application trying to modify it; unless it is a buggy application.
>
What if the client modifies the data just after the promotion?
Naively considered, all the changes can be accepted, but are there any issues?
>
Regarding
GUCs, almost all of them is PGC_POSTMASTER (so it cannot be modified unless the
server is restarted). The ones that are not PGC_POSTMASTER, does not affect the
pg_createsubscriber execution [1].
>
IIUC, primary_conninfo and primary_slot_name is PGC_SIGHUP.
>
I'm just pointing out that this case is a different from pg_upgrade (from which
this idea was taken). I'm not saying that's a bad idea. I'm just arguing that
you might be preventing some access read only access (monitoring) when it is
perfectly fine to connect to the database and execute queries. As I said
before, the current UI allows anyone to setup the standby to accept only local
connections. Of course, it is an extra step but it is possible. However, once
you apply v16-0007, there is no option but use only local connection during the
transformation. Is it an acceptable limitation?
>
My remained concern is written above. If they do not problematic we may not have
to restrict them for now. At that time, changes
1) overwriting a port number,
2) setting listen_addresses = ''
are not needed, right? IIUC inconsistency of -P may be still problematic.
>
pglogical_create_subscriber does nothing [2][3].
>
Oh, thanks.
Just to confirm - pglogical set shared_preload_libraries to '', should we follow or not?
Best Regards,
Hayato Kuroda
FUJITSU LIMITED
https://www.fujitsu.com/global/