4a0d29c50e
This corrects the permissions we grant to root allowing it access everywhere. Sadly the more restrictive approach was causing issues everywhere. Change-Id: I3c1b755e4bed6a209c127258b79d3ef557caf19e Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
64 lines
2.0 KiB
YAML
64 lines
2.0 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Create galera users
|
|
mysql_user:
|
|
login_user: "{{ galera_root_user }}"
|
|
login_password: "{{ galera_root_password }}"
|
|
login_host: "127.0.0.1"
|
|
name: "{{ item.name }}"
|
|
host: "{{ item.host }}"
|
|
password: "{{ item.password }}"
|
|
priv: "{{ item.priv }}"
|
|
state: "{{ item.state }}"
|
|
with_items:
|
|
- name: "{{ galera_root_user }}"
|
|
host: "%"
|
|
password: "{{ galera_root_password }}"
|
|
priv: "*.*:ALL,GRANT"
|
|
state: present
|
|
- name: "{{ galera_root_user }}"
|
|
host: "localhost"
|
|
password: "{{ galera_root_password }}"
|
|
priv: "*.*:ALL"
|
|
state: absent
|
|
- name: "{{ galera_monitoring_user }}"
|
|
host: '%'
|
|
password: "{{ galera_monitoring_user_password }}"
|
|
priv: "*.*:USAGE"
|
|
state: present
|
|
- name: "{{ galera_monitoring_user }}"
|
|
host: 'localhost'
|
|
password: "{{ galera_monitoring_user_password }}"
|
|
priv: "*.*:USAGE"
|
|
state: present
|
|
register: galera_users
|
|
until: galera_users | success
|
|
retries: 3
|
|
delay: 10
|
|
delegate_to: "{{ galera_server_bootstrap_node }}"
|
|
run_once: true
|
|
|
|
- name: Run MySQL Upgrade
|
|
command: "/usr/bin/mysql_upgrade"
|
|
register: galera_mysql_upgrade
|
|
changed_when:
|
|
- not galera_mysql_upgrade.stdout | search("already upgraded")
|
|
until: galera_mysql_upgrade | success
|
|
retries: 3
|
|
delay: 10
|
|
delegate_to: "{{ galera_server_bootstrap_node }}"
|
|
run_once: true
|