mirror of
https://github.com/MariaDB/server.git
synced 2025-04-08 00:05:34 +02:00

Implement automatic creation of temporary accounts for SST and pass account credentials to SST script via socket as opposed to environment variables. Delete the user after the SST script returns, Respect wsrep_sst_auth set by the adminitrator in case some additional privilege grants are needed for particular SST method. mysqldump SST requires significant change to make use of the new automatic user generation facility. For now just make it compatible by ignoring automatically generated user and rely only on wsrep_sst_auth setting on the joiner node to keep backward compatibility. Adapt mysqldump SST to automatic SST user generation changes: - disable special treatment for mysqldump SST on donor - make mysqldump SST script compatible with the new SST script interface. Differentiate user privileges for different SST methods: - grant minimum required privileges for clone and xtrabackup SST accounts - grant all privileges to custom SST accounts as it is not known what is needed. - disable SST account generation for rsync SST since it is not needed. MTR tests: - add MTR tests for clone and xtrabackup SSTs without wsrep_sst_auth, - add MTR test for testing masking of wsrep_sst_auth. - don't attmept to restore original wsrep_sst_auth in MTR tests as it is always masked. Signed-off-by: Julius Goryavsky <julius.goryavsky@mariadb.com>
59 lines
1.4 KiB
Text
59 lines
1.4 KiB
Text
connection node_2;
|
|
connection node_1;
|
|
# Correct Galera library found
|
|
SELECT VARIABLE_NAME, VARIABLE_VALUE
|
|
FROM INFORMATION_SCHEMA.GLOBAL_VARIABLES
|
|
WHERE VARIABLE_NAME LIKE 'wsrep_%'
|
|
AND VARIABLE_NAME NOT IN (
|
|
'WSREP_PROVIDER_OPTIONS',
|
|
'WSREP_SST_RECEIVE_ADDRESS',
|
|
'WSREP_NODE_ADDRESS',
|
|
'WSREP_NODE_NAME',
|
|
'WSREP_PROVIDER',
|
|
'WSREP_DATA_HOME_DIR',
|
|
'WSREP_NODE_INCOMING_ADDRESS',
|
|
'WSREP_START_POSITION',
|
|
'WSREP_PATCH_VERSION'
|
|
)
|
|
ORDER BY VARIABLE_NAME;
|
|
VARIABLE_NAME VARIABLE_VALUE
|
|
WSREP_ALLOWLIST
|
|
WSREP_AUTO_INCREMENT_CONTROL ON
|
|
WSREP_CERTIFICATION_RULES strict
|
|
WSREP_CERTIFY_NONPK ON
|
|
WSREP_CLUSTER_ADDRESS gcomm://
|
|
WSREP_CLUSTER_NAME my_wsrep_cluster
|
|
WSREP_CONVERT_LOCK_TO_TRX OFF
|
|
WSREP_DBUG_OPTION
|
|
WSREP_DEBUG NONE
|
|
WSREP_DESYNC OFF
|
|
WSREP_DIRTY_READS OFF
|
|
WSREP_DRUPAL_282555_WORKAROUND OFF
|
|
WSREP_FORCED_BINLOG_FORMAT NONE
|
|
WSREP_GTID_DOMAIN_ID 0
|
|
WSREP_GTID_MODE OFF
|
|
WSREP_IGNORE_APPLY_ERRORS 7
|
|
WSREP_LOG_CONFLICTS OFF
|
|
WSREP_MAX_WS_ROWS 0
|
|
WSREP_MAX_WS_SIZE 2147483647
|
|
WSREP_MODE
|
|
WSREP_MYSQL_REPLICATION_BUNDLE 0
|
|
WSREP_NOTIFY_CMD
|
|
WSREP_ON ON
|
|
WSREP_OSU_METHOD TOI
|
|
WSREP_RECOVER OFF
|
|
WSREP_REJECT_QUERIES NONE
|
|
WSREP_RESTART_SLAVE OFF
|
|
WSREP_RETRY_AUTOCOMMIT 1
|
|
WSREP_SLAVE_FK_CHECKS ON
|
|
WSREP_SLAVE_THREADS 1
|
|
WSREP_SLAVE_UK_CHECKS OFF
|
|
WSREP_SR_STORE table
|
|
WSREP_SST_AUTH ********
|
|
WSREP_SST_DONOR
|
|
WSREP_SST_DONOR_REJECTS_QUERIES OFF
|
|
WSREP_SST_METHOD rsync
|
|
WSREP_STATUS_FILE
|
|
WSREP_SYNC_WAIT 15
|
|
WSREP_TRX_FRAGMENT_SIZE 0
|
|
WSREP_TRX_FRAGMENT_UNIT bytes
|