-
Notifications
You must be signed in to change notification settings - Fork 92
mysql_user: added flush privileges to write dynamic privs into db #338
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Codecov Report
@@ Coverage Diff @@
## main #338 +/- ##
=======================================
Coverage 78.26% 78.27%
=======================================
Files 27 27
Lines 2250 2251 +1
Branches 543 543
=======================================
+ Hits 1761 1762 +1
Misses 333 333
Partials 156 156
Continue to review full report at Codecov.
|
@bigo8525 hi, thanks for the issue and the PR! LGTM @rsicart @Jorge-Rodriguez @bmalynovytch i wounder if there are possible pitfalls? |
changelogs/fragments/338-mysql_user_fix_missing_dynamic_privileges.yml
Outdated
Show resolved
Hide resolved
…eges.yml Co-authored-by: Andrew Klychkov <[email protected]>
@bigo8525 thanks! Let's wait for other maintainers' feedback for a couple of days. |
@rsicart yep, the statement doesn't seem dangerous to me to, approved. |
Backport to stable-2: 💚 backport PR created✅ Backport PR branch: Backported as #339 🤖 @patchback |
Backport to stable-1: 💔 cherry-picking failed — conflicts found❌ Failed to cleanly apply 1dcc5ec on top of patchback/backports/stable-1/1dcc5ec086434e707d0ad122ffd9b612187b1132/pr-338 Backporting merged PR #338 into main
🤖 @patchback |
* added flush privileges to write dynamic privs into db Fixes #120 * added changelog fragment * Update changelogs/fragments/338-mysql_user_fix_missing_dynamic_privileges.yml Co-authored-by: Andrew Klychkov <[email protected]> Co-authored-by: Andrew Klychkov <[email protected]> (cherry picked from commit 1dcc5ec)
…) (#339) * added flush privileges to write dynamic privs into db Fixes #120 * added changelog fragment * Update changelogs/fragments/338-mysql_user_fix_missing_dynamic_privileges.yml Co-authored-by: Andrew Klychkov <[email protected]> Co-authored-by: Andrew Klychkov <[email protected]> (cherry picked from commit 1dcc5ec) Co-authored-by: bigo8525 <[email protected]>
all backports have been merged |
Fixes #120
SUMMARY
Added Flush Privileges after the revoke all privileges to write consitent the dynamic privileges which are required for cluster creation
ISSUE TYPE
COMPONENT NAME
ADDITIONAL INFORMATION
Without this fix a user with all privileges is only on every second run allowed to create a cluster or replicaset on the host.
Mysqlsh with dba.checkInstanceConfiguration() is failing because these rights are missing:
CLONE_ADMIN, CONNECTION_ADMIN, GROUP_REPLICATION_ADMIN, PERSIST_RO_VARIABLES_ADMIN, REPLICATION_APPLIER, REPLICATION_SLAVE_ADMIN, ROLE_ADMIN, SYSTEM_VARIABLES_ADMIN
After a new run with
priv: "*.*:ALL,GRANT"
the dba.checkInstanceConfiguration() check is successfull.More Details could be found in the issue #120