spurious mysql root user created when deploying a HA control plane

[Damien Ciabrini]

When deploying a 3-node galera cluster, three mysql databases are created on each controller node. each database create various root users (root@%, root@localhost, root@<controller-x>).

The first time the galera cluster is started, the galera resource agent select a node to bootstrapped the cluster from. Currently this ends up selecting controller-2. The other two controllers synchronize the content of their DB to that of controller-2. This means root user root@controller-0 and root@controller-1 are destroyed in the process.

We never use root@controller-2 in tripleo, but this spurious user stays in the database anyway and should get dropped eventually.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/712726

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/712726
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=a67cfd0ba9b0900bc276c5c667dafe2824f54a47
Submitter: Zuul
Branch: master

commit a67cfd0ba9b0900bc276c5c667dafe2824f54a47
Author: Damien Ciabrini <email address hidden>
Date: Thu Mar 12 17:06:14 2020 +0100

    HA: drop spurious mysql user on stack deploy

    In HA deployments, puppet-mysql is not in charge of deleting
    all default users in the DB, so we end up keeping an extra
    root@<controller-x> user that is never used nor supported for
    password update. Make sure we delete it at creation time.

    Change-Id: I0dbe6bd43ad0e6bcb884798912d195e94738c344
    Closes-Bug: #1867165

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/train
Review: https://review.opendev.org/715906

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/715906
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=e7a4cee7b92ff8119be34d750b08624b348d739f
Submitter: Zuul
Branch: stable/train

commit e7a4cee7b92ff8119be34d750b08624b348d739f
Author: Damien Ciabrini <email address hidden>
Date: Thu Mar 12 17:06:14 2020 +0100

    HA: drop spurious mysql user on stack deploy

    In HA deployments, puppet-mysql is not in charge of deleting
    all default users in the DB, so we end up keeping an extra
    root@<controller-x> user that is never used nor supported for
    password update. Make sure we delete it at creation time.

    Change-Id: I0dbe6bd43ad0e6bcb884798912d195e94738c344
    Closes-Bug: #1867165
    (cherry picked from commit a67cfd0ba9b0900bc276c5c667dafe2824f54a47)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 12.2.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 11.4.0 release.