Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use explicit credentials if password-less access is not possible #50

Merged
merged 1 commit into from
Mar 27, 2024

Conversation

bajo
Copy link

@bajo bajo commented Mar 14, 2024

When we disable the management of /root/.my.cnf with percona_server_user_root_cnf_manage: false we lose the ability to run ansible tasks in our playbook.

Adding login_user and login_password let's us use the root password to run the tasks.
check_implicit_admin makes sure to first attempt the password-less login if possible.

@tersmitten
Copy link
Member

The only usecase I can think of to set percona_server_user_root_cnf_manage to false is when using percona-client.

@bajo
Copy link
Author

bajo commented Mar 14, 2024

Our use-case is that we do not want to have the mysql root user's password stored in /root/.my.cnf. If we set percona_server_user_root_cnf_manage: false, the playbook fails however.
Adding the changes from the PR allows us not to store the password in the file, but still run the playbook.

@tersmitten tersmitten self-assigned this Mar 15, 2024
@bajo
Copy link
Author

bajo commented Mar 25, 2024

@tersmitten it might help to clarify our use-case a little better.
We do not want every local sys-admin to be able to read the whole database without a password.
If they need access, they should at least need to retrieve the password from our password-manager, and enter it manually afterwards.

@tersmitten tersmitten merged commit 4819ffe into Oefenweb:master Mar 27, 2024
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants