tripleo-image-elements

History

Kiall Mac Innes 01f291b9b8 Support custom privileges for managed MySQL users MySQL users can now now 'privilege' property associated with them, allow for managing users with lower than ALL privileges. Change-Id: Id647c5f0cf169f9c907cf9e9dfca16e05c796257		2014-11-10 12:55:36 +00:00
..
install.d	Migrate to package-installs scripts	2014-11-05 01:38:05 -08:00
os-apply-config/mnt/state	Secure the MySQL bind-address on the seed	2014-10-06 18:00:10 +01:00
os-refresh-config	Support custom privileges for managed MySQL users	2014-11-10 12:55:36 +00:00
element-deps	Migrate to package-installs scripts	2014-11-05 01:38:05 -08:00
README.md	Support custom privileges for managed MySQL users	2014-11-10 12:55:36 +00:00

README.md

This element contains code common for mysql and mariadb elements, make sure you include once of them when including this element.

TODO: auto-tune settings based on host resources or metadata service.

Configuration

Users will be created if Heat Metadata is passed in under the 'mysql.create-users' section. For example:

mysql:
  create-users:
    - username: dbuser1
      database: somedb
      userhandle:
        Ref: SomeWaitConditionHandle

This will cause mysql to create the user 'dbuser1' if it does not exist, and grant it all privileges on somedb. If no 'database' parameter is supplied, the user will be given access to all databases. It will have a random password generated and passed to the WaitConditionHandle with the key of the username, and password as the data. A password can also be given for the user like this:

mysql:
  create-users:
    - username: dbuser2
      database: somedb
      password: abcdefg12345

If a userhandle is also given with the password, it will be passed to the wait condition handle in the same manner.

Privileges may be restricted for the user like so:

mysql:
  create-users:
    - username: dbuser2
      database: somedb
      password: abcdefg12345
      privilege: "USAGE, SELECT"