Skip to content

Comments

cache root pw in file outside of mounted volumes#388

Merged
openshift-merge-bot[bot] merged 1 commit intoopenstack-k8s-operators:mainfrom
zzzeek:move_mycnf
Jan 26, 2026
Merged

cache root pw in file outside of mounted volumes#388
openshift-merge-bot[bot] merged 1 commit intoopenstack-k8s-operators:mainfrom
zzzeek:move_mycnf

Conversation

@zzzeek
Copy link
Contributor

@zzzeek zzzeek commented Dec 10, 2025

Don't write root pw in /var/lib/mysql which is volume mounted. Also, instead of using /etc or /etc/my.cnf.d, we dont want a mysql-owned writable file in /etc which is also considered to be server configuration so
since we don't actually need mariadb tools to find this file, instead write to an arbitrary file in a non-mounted directory like /var/local/mysql_pw_cache.cnf.

@zzzeek zzzeek requested a review from dciabrin December 10, 2025 20:41
@openshift-ci openshift-ci bot requested review from dprince and olliewalsh December 10, 2025 20:41
@zzzeek
Copy link
Contributor Author

zzzeek commented Dec 16, 2025

/retest

@zzzeek zzzeek force-pushed the move_mycnf branch 3 times, most recently from 1d2aa3f to 8380a7f Compare December 18, 2025 17:01
@zzzeek zzzeek requested a review from dciabrin December 18, 2025 19:00
@zzzeek
Copy link
Contributor Author

zzzeek commented Dec 18, 2025

the job passed. not sure if it was the job or the code, but this version of the code should be the most robust about making sure the /var/local/my.cnf directory exists and that galera.cnf will not error out due to missing directory / file

@dciabrin
Copy link
Contributor

/lgtm

Don't write root pw in /var/lib/mysql which is volume
mounted.  Also, instead of using /etc or /etc/my.cnf.d,
we dont want a mysql-owned writable file in /etc which
is also considered to be server configuration so
since we don't actually need mariadb tools to find this
file, instead write to an arbitrary file in a non-mounted
directory like /var/local/mysql_pw_cache.cnf.
@dciabrin
Copy link
Contributor

/lgtm

@openshift-ci openshift-ci bot added the lgtm label Jan 26, 2026
@lmiccini
Copy link

/approve

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jan 26, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dciabrin, lmiccini, zzzeek

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot openshift-merge-bot bot merged commit 4275b42 into openstack-k8s-operators:main Jan 26, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants