openstack/kolla-ansible
Code Issues Proposed changes

Fix privileges for MariaDB 10.5

Browse Source 
"BINLOG MONITOR" and "SLAVE MONITOR" replace
"REPLICATION CLIENT" (which is now an alias for "BINLOG MONITOR").
The validation in Ansible MySQL collection is too simple to
understand aliases and breaks. Hence, let's use the canonical
names and adapt per service according to its needs.

Change-Id: I1175e4846384accd19942620dc155d0c5728e64b
This commit is contained in:
Radosław Piliszek 2021-10-06 13:19:59 +00:00
parent bd6ca6b286
commit c7c14e1c43
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/roles/mariadb/tasks/register.yml
View File

@ -57,7 +57,7 @@
name: "{{ mariadb_backup_database_user }}" name: "{{ mariadb_backup_database_user }}"
password: "{{ mariadb_backup_database_password }}" password: "{{ mariadb_backup_database_password }}"
host: "%" host: "%"
priv: "*.*:CREATE TABLESPACE,RELOAD,PROCESS,SUPER,LOCK TABLES,REPLICATION CLIENT" priv: "*.*:CREATE TABLESPACE,RELOAD,PROCESS,SUPER,LOCK TABLES,BINLOG MONITOR"
append_privs: True append_privs: True
when: when:
- enable_mariabackup | bool - enable_mariabackup | bool

2
ansible/roles/prometheus/tasks/bootstrap.yml
View File

@ -11,7 +11,7 @@
name: "{{ prometheus_mysql_exporter_database_user }}" name: "{{ prometheus_mysql_exporter_database_user }}"
password: "{{ prometheus_mysql_exporter_database_password }}" password: "{{ prometheus_mysql_exporter_database_password }}"
host: "%" host: "%"
priv: "*.*:PROCESS,REPLICATION CLIENT,SELECT" priv: "*.*:PROCESS,SLAVE MONITOR,SELECT"
append_privs: "yes" append_privs: "yes"
run_once: True run_once: True
delegate_to: "{{ groups['prometheus'][0] }}" delegate_to: "{{ groups['prometheus'][0] }}"