Fix privileges for MariaDB 10.5

"BINLOG MONITOR" and "SLAVE MONITOR" replace
"REPLICATION CLIENT" (which is now an alias for "BINLOG MONITOR").
The validation in Ansible MySQL collection is too simple to
understand aliases and breaks. Hence, let's use the canonical
names and adapt per service according to its needs.

Change-Id: I1175e4846384accd19942620dc155d0c5728e64b
This commit is contained in:
Radosław Piliszek 2021-10-06 13:19:59 +00:00
parent bd6ca6b286
commit c7c14e1c43
2 changed files with 2 additions and 2 deletions

View File

@ -57,7 +57,7 @@
name: "{{ mariadb_backup_database_user }}"
password: "{{ mariadb_backup_database_password }}"
host: "%"
priv: "*.*:CREATE TABLESPACE,RELOAD,PROCESS,SUPER,LOCK TABLES,REPLICATION CLIENT"
priv: "*.*:CREATE TABLESPACE,RELOAD,PROCESS,SUPER,LOCK TABLES,BINLOG MONITOR"
append_privs: True
when:
- enable_mariabackup | bool

View File

@ -11,7 +11,7 @@
name: "{{ prometheus_mysql_exporter_database_user }}"
password: "{{ prometheus_mysql_exporter_database_password }}"
host: "%"
priv: "*.*:PROCESS,REPLICATION CLIENT,SELECT"
priv: "*.*:PROCESS,SLAVE MONITOR,SELECT"
append_privs: "yes"
run_once: True
delegate_to: "{{ groups['prometheus'][0] }}"