23339d18ea
With ersion upgrade we get rid of vexxhost repo that is not valid anymore and cover some critical vulnarabilities that were found in MariaDB. Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/850350 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_rally/+/850477 Change-Id: Ie8ee1618a686705fb49a6c784df6e499e98cb968
89 lines
2.8 KiB
YAML
89 lines
2.8 KiB
YAML
---
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
## APT Cache Options
|
|
cache_timeout: 600
|
|
|
|
# Default private device setting
|
|
_galera_disable_privatedevices: yes
|
|
|
|
# Galera GPG Keys
|
|
_galera_gpg_keys:
|
|
# MariaDB Signing Key <signing-key@mariadb.org>
|
|
- id: C74CD1D8
|
|
file: /etc/ssl/mariadb-key
|
|
|
|
galera_server_required_distro_packages:
|
|
- apt-transport-https
|
|
- debconf-utils
|
|
- libaio1
|
|
- libc6
|
|
- libgcc1
|
|
- libgcrypt20
|
|
- libstdc++6
|
|
- python3-pymysql # needed by mysql_user
|
|
- software-properties-common
|
|
- xinetd
|
|
|
|
galera_etc_conf_file: "/etc/mysql/my.cnf"
|
|
galera_etc_include_dir: "/etc/mysql/conf.d"
|
|
galera_var_run_socket: "/var/run/mysqld/mysqld.sock"
|
|
|
|
# The package name for mariaDB is set as a variable
|
|
# so that it can be used in debconf later in the
|
|
# "galera_common" role.
|
|
_galera_mariadb_server_package: "mariadb-server-{{ galera_major_version }}"
|
|
|
|
# NB This is specifically galera_server_mariadb_distro_packages as these
|
|
# packages only get installed during the galera play - this is because of
|
|
# the preseed task and the service startup control used when installing
|
|
# mariadb-galera-server and galera.
|
|
galera_server_mariadb_distro_packages:
|
|
- libmariadb-dev
|
|
- mariadb-client-{{ galera_major_version }}
|
|
- mariadb-backup
|
|
- "{{ galera_mariadb_server_package }}"
|
|
- rsync
|
|
- socat
|
|
|
|
# The packages to uninstall during an upgrade from a previous version
|
|
galera_server_upgrade_packages_remove:
|
|
- mariadb-server-*
|
|
- mysql-common
|
|
|
|
galera_debconf_items:
|
|
- question: "mysql-server/root_password"
|
|
name: "{{ galera_mariadb_server_package }}"
|
|
value: "{{ galera_root_password }}"
|
|
vtype: "string"
|
|
- question: "mysql-server/root_password_again"
|
|
name: "{{ galera_mariadb_server_package }}"
|
|
value: "{{ galera_root_password }}"
|
|
vtype: "string"
|
|
|
|
# Repositories
|
|
_galera_repo_url: "http://{{ galera_repo_host }}/MariaDB/mariadb-{{ galera_major_version }}.{{ galera_minor_version }}/repo/{{ ansible_distribution | lower }}"
|
|
_galera_repo:
|
|
repo: "deb {{ galera_repo_url }} {{ ansible_distribution_release }} main"
|
|
state: "present"
|
|
filename: "MariaDB"
|
|
|
|
galera_wsrep_provider: "/usr/lib/galera/libgalera_smm.so"
|
|
|
|
galera_client_distro_packages:
|
|
- "mariadb-client-{{ galera_major_version }}"
|
|
|
|
galera_unix_socket: "/var/run/mysqld/mysqld.sock"
|