DB: Promote pausing schema from config-next to config (#7878)

sa/db-next/boulder_sa/20240514000000_Paused.sql

@@ -1,20 +0,0 @@
--- +migrate Up
--- SQL in section 'Up' is executed when this migration is applied
-
--- This table has no auto-incrementing primary key because we don't plan to
--- partition it. This table expected to be < 800K rows initially and grow at a
--- rate of ~18% per year.
-
-CREATE TABLE `paused` (
-  `registrationID` bigint(20) UNSIGNED NOT NULL,
-  `identifierType` tinyint(4) NOT NULL,
-  `identifierValue` varchar(255) NOT NULL,
-  `pausedAt` datetime NOT NULL,
-  `unpausedAt` datetime DEFAULT NULL,
-  PRIMARY KEY (`registrationID`, `identifierValue`, `identifierType`)
-);
-
--- +migrate Down
--- SQL section 'Down' is executed when this migration is rolled back
-
-DROP TABLE `paused`;

sa/db-next/boulder_sa/20240514000000_Paused.sql

@@ -0,0 +1 @@
+../../db/boulder_sa/20240514000000_Paused.sql

sa/db/boulder_sa/20240514000000_Paused.sql

@@ -0,0 +1,20 @@
+-- +migrate Up
+-- SQL in section 'Up' is executed when this migration is applied
+
+-- This table has no auto-incrementing primary key because we don't plan to
+-- partition it. This table expected to be < 800K rows initially and grow at a
+-- rate of ~18% per year.
+
+CREATE TABLE `paused` (
+  `registrationID` bigint(20) UNSIGNED NOT NULL,
+  `identifierType` tinyint(4) NOT NULL,
+  `identifierValue` varchar(255) NOT NULL,
+  `pausedAt` datetime NOT NULL,
+  `unpausedAt` datetime DEFAULT NULL,
+  PRIMARY KEY (`registrationID`, `identifierValue`, `identifierType`)
+);
+
+-- +migrate Down
+-- SQL section 'Down' is executed when this migration is rolled back
+
+DROP TABLE `paused`;

test/config/wfe2.json

@@ -104,7 +104,15 @@
 		"pendingAuthorizationLifetimeDays": 7,
 		"features": {
 			"ServeRenewalInfo": true,
-			"IncrementRateLimits": true
+			"IncrementRateLimits": true,
+			"CheckIdentifiersPaused": true
+		},
+		"unpause": {
+			"hmacKey": {
+				"keyFile": "test/secrets/sfe_unpause_key"
+			},
+			"jwtLifetime": "336h",
+			"url": "https://boulder.service.consul:4003"
 		}
 	},
 	"syslog": {

test/integration/pausing_test.go

@@ -4,7 +4,6 @@ package integration
 
 import (
 	"context"
-	"os"
 	"strconv"
 	"strings"
 	"testing"
@@ -25,10 +24,6 @@ import (
 func TestIdentifiersPausedForAccount(t *testing.T) {
 	t.Parallel()
 
-	if !strings.Contains(os.Getenv("BOULDER_CONFIG_DIR"), "test/config-next") {
-		t.Skip("Skipping test as it requires the next configuration")
-	}
-
 	tlsCerts := &cmd.TLSConfig{
 		CACertFile: "test/certs/ipki/minica.pem",
 		CertFile:   "test/certs/ipki/ra.boulder/cert.pem",

wfe2/wfe_test.go

@@ -409,16 +409,10 @@ func setupWFE(t *testing.T) (WebFrontEndImpl, clock.FakeClock, requestSigner) {
 	txnBuilder, err := ratelimits.NewTransactionBuilder("../test/config-next/wfe2-ratelimit-defaults.yml", "")
 	test.AssertNotError(t, err, "making transaction composer")
 
-	var unpauseSigner unpause.JWTSigner
-	var unpauseLifetime time.Duration
-	var unpauseURL string
-	if os.Getenv("BOULDER_CONFIG_DIR") == "test/config-next" {
-		unpauseSigner, err = unpause.NewJWTSigner(cmd.HMACKeyConfig{KeyFile: "../test/secrets/sfe_unpause_key"})
-		test.AssertNotError(t, err, "making unpause signer")
-		unpauseLifetime = time.Hour * 24 * 14
-		unpauseURL = "https://boulder.service.consul:4003"
-	}
-
+	unpauseSigner, err := unpause.NewJWTSigner(cmd.HMACKeyConfig{KeyFile: "../test/secrets/sfe_unpause_key"})
+	test.AssertNotError(t, err, "making unpause signer")
+	unpauseLifetime := time.Hour * 24 * 14
+	unpauseURL := "https://boulder.service.consul:4003"
 	wfe, err := NewWebFrontEndImpl(
 		stats,
 		fc,