![Major Hayden](/assets/img/avatar_default.png)
The original bug was opened because .my.cnf (with sensitive root credentials) was being deployed on compute hosts without needing to be there. This patch restricts the deployment of .my.cnf files to the galera/utility containers only. This improves security while still allowing deployers to diagnose galera server issues on the galera server containers themselves, and to access the database from the utility containers for diagnostic purposes. Closes-bug: 1510596 Implements: blueprint limit-mysql-config-distribution Change-Id: I42f39cbfcb02b97846894592d642ac0c58a82b02
OpenStack Galera Client
- tags
-
openstack, galera, client, cloud, ansible
- category
-
*nix
Role for the installation of the mariadb and xtrabackup clients used to interact with and manage a galera cluster.
Example Ansible play
- name: Install galera server
hosts: galera_all
user: root
roles:
- { role: "galera_server", tags: [ "galera-server" ] }
vars:
galera_address: "10.0.0.1"
galera_root_password: secrete
galera_root_user: root