зеркало из https://github.com/github/vitess-gh.git
104 строки
4.1 KiB
SQL
104 строки
4.1 KiB
SQL
# This file is executed immediately after mysql_install_db,
|
|
# to initialize a fresh data directory.
|
|
|
|
###############################################################################
|
|
# WARNING: This sql is *NOT* safe for production use,
|
|
# as it contains default well-known users and passwords.
|
|
# Care should be taken to change these users and passwords
|
|
# for production.
|
|
###############################################################################
|
|
|
|
###############################################################################
|
|
# Equivalent of mysql_secure_installation
|
|
###############################################################################
|
|
|
|
# Changes during the init db should not make it to the binlog.
|
|
# They could potentially create errant transactions on replicas.
|
|
SET sql_log_bin = 0;
|
|
# Remove anonymous users.
|
|
DELETE FROM mysql.user WHERE User = '';
|
|
|
|
# Disable remote root access (only allow UNIX socket).
|
|
DELETE FROM mysql.user WHERE User = 'root' AND Host != 'localhost';
|
|
|
|
# Remove test database.
|
|
DROP DATABASE IF EXISTS test;
|
|
|
|
###############################################################################
|
|
# Vitess defaults
|
|
###############################################################################
|
|
|
|
# Vitess-internal database.
|
|
CREATE DATABASE IF NOT EXISTS _vt;
|
|
# Note that definitions of local_metadata and shard_metadata should be the same
|
|
# as in production which is defined in go/vt/mysqlctl/metadata_tables.go.
|
|
CREATE TABLE IF NOT EXISTS _vt.local_metadata (
|
|
name VARCHAR(255) NOT NULL,
|
|
value VARCHAR(255) NOT NULL,
|
|
db_name VARBINARY(255) NOT NULL,
|
|
PRIMARY KEY (db_name, name)
|
|
) ENGINE=InnoDB;
|
|
CREATE TABLE IF NOT EXISTS _vt.shard_metadata (
|
|
name VARCHAR(255) NOT NULL,
|
|
value MEDIUMBLOB NOT NULL,
|
|
db_name VARBINARY(255) NOT NULL,
|
|
PRIMARY KEY (db_name, name)
|
|
) ENGINE=InnoDB;
|
|
|
|
# Admin user with all privileges.
|
|
CREATE USER 'vt_dba'@'localhost';
|
|
GRANT ALL ON *.* TO 'vt_dba'@'localhost';
|
|
GRANT GRANT OPTION ON *.* TO 'vt_dba'@'localhost';
|
|
|
|
# User for app traffic, with global read-write access.
|
|
CREATE USER 'vt_app'@'localhost';
|
|
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, FILE,
|
|
REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES,
|
|
LOCK TABLES, EXECUTE, REPLICATION CLIENT, CREATE VIEW,
|
|
SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER
|
|
ON *.* TO 'vt_app'@'localhost';
|
|
|
|
# User for app debug traffic, with global read access.
|
|
CREATE USER 'vt_appdebug'@'localhost';
|
|
GRANT SELECT, SHOW DATABASES, PROCESS ON *.* TO 'vt_appdebug'@'localhost';
|
|
|
|
# User for administrative operations that need to be executed as non-SUPER.
|
|
# Same permissions as vt_app here.
|
|
CREATE USER 'vt_allprivs'@'localhost';
|
|
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, FILE,
|
|
REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES,
|
|
LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW,
|
|
SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER
|
|
ON *.* TO 'vt_allprivs'@'localhost';
|
|
|
|
# User for slave replication connections.
|
|
CREATE USER 'vt_repl'@'%';
|
|
GRANT REPLICATION SLAVE ON *.* TO 'vt_repl'@'%';
|
|
|
|
# User for Vitess VReplication (base vstreamers and vplayer).
|
|
CREATE USER 'vt_filtered'@'localhost';
|
|
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, FILE,
|
|
REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES,
|
|
LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW,
|
|
SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER
|
|
ON *.* TO 'vt_filtered'@'localhost';
|
|
|
|
# User for general MySQL monitoring.
|
|
CREATE USER 'vt_monitoring'@'localhost';
|
|
GRANT SELECT, PROCESS, SUPER, REPLICATION CLIENT, RELOAD
|
|
ON *.* TO 'vt_monitoring'@'localhost';
|
|
GRANT SELECT, UPDATE, DELETE, DROP
|
|
ON performance_schema.* TO 'vt_monitoring'@'localhost';
|
|
|
|
# User for Orchestrator (https://github.com/openark/orchestrator).
|
|
CREATE USER 'orc_client_user'@'%' IDENTIFIED BY 'orc_client_user_password';
|
|
GRANT SUPER, PROCESS, REPLICATION SLAVE, RELOAD
|
|
ON *.* TO 'orc_client_user'@'%';
|
|
GRANT SELECT
|
|
ON _vt.* TO 'orc_client_user'@'%';
|
|
|
|
FLUSH PRIVILEGES;
|
|
|
|
RESET SLAVE ALL;
|
|
RESET MASTER;
|