ca054bd8f7
The galera server role has quite a bit going on within it and because of recent improvements in Ansible we can make better use of tasks, blocks, facts, local facts, and organization. This change tunes the role up following some of our better/more modern patterns allowing the role to not only be more efficient but also easier to understand and improves the roles idempotency. Change-Id: If189a8192f22aafb168587361ca8e6903c918697 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
45 lines
2.1 KiB
Django/Jinja
45 lines
2.1 KiB
Django/Jinja
#!/usr/bin/env bash
|
|
# Copyright 2017, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
set -ev
|
|
|
|
STOP_MYSQL=false
|
|
|
|
if ! systemctl status mysql; then
|
|
STOP_MYSQL=true
|
|
systemctl start mysql
|
|
sleep 10
|
|
systemctl status mysql
|
|
fi
|
|
|
|
if mysqladmin --no-defaults --port=3306 --socket=/var/run/mysqld/mysqld.sock --host=127.0.0.1 --user=root password "{{ galera_root_password }}"; then
|
|
mysql -u root -h localhost -e "UPDATE mysql.user SET Password=PASSWORD('$rootpass') WHERE User='root';"
|
|
mysql -u root -h localhost -e "DELETE FROM mysql.user WHERE user='';"
|
|
mysql -u root -h localhost -e "DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('%', 'localhost', '127.0.0.1', '::1');"
|
|
mysql -u root -h localhost -e "DELETE FROM mysql.db WHERE Db='test' OR Db='test\_%';"
|
|
mysql -u root -h localhost -e "GRANT ALL PRIVILEGES ON *.* TO '{{ galera_root_user }}'@'localhost' IDENTIFIED BY '{{ galera_root_password }}' WITH GRANT OPTION;"
|
|
mysql -u root -h localhost -e "GRANT ALL PRIVILEGES ON *.* TO '{{ galera_root_user }}'@'127.0.0.1' IDENTIFIED BY '{{ galera_root_password }}' WITH GRANT OPTION;"
|
|
mysql -u root -h localhost -e "GRANT ALL PRIVILEGES ON *.* TO '{{ galera_root_user }}'@'::1' IDENTIFIED BY '{{ galera_root_password }}' WITH GRANT OPTION;"
|
|
mysql -u root -h localhost -e "GRANT ALL PRIVILEGES ON *.* TO '{{ galera_root_user }}'@'%' IDENTIFIED BY '{{ galera_root_password }}' WITH GRANT OPTION;"
|
|
mysql -u root -h localhost -e "FLUSH PRIVILEGES;"
|
|
fi
|
|
|
|
if [ "${STOP_MYSQL}" = true ]; then
|
|
systemctl stop mysql
|
|
fi
|
|
|
|
# Create a marker file to ensure this script is not run again
|
|
touch "/var/lib/mysql/osa_default_secured"
|