From bd14de825f1ad7ce911162c659bd81725226232d Mon Sep 17 00:00:00 2001 From: Jorge Hernandez Date: Tue, 27 Feb 2018 11:41:54 -0600 Subject: docker db image simplification 1. use mariadb image from docker registry to simplify set up. 2. remove harcoded root and user mariadb accounts 3. restrict access to user account to just specific databases. Change-Id: Iaa916dbf2de2474fcc483a4be6167b4b92a2de61 Issue-ID: POLICY-650 Signed-off-by: Jorge Hernandez --- config/db/db.conf | 3 +++ config/db/db.sh | 9 +++++++++ 2 files changed, 12 insertions(+) create mode 100644 config/db/db.conf create mode 100644 config/db/db.sh (limited to 'config/db') diff --git a/config/db/db.conf b/config/db/db.conf new file mode 100644 index 00000000..958f8bf0 --- /dev/null +++ b/config/db/db.conf @@ -0,0 +1,3 @@ +MYSQL_ROOT_PASSWORD=secret +MYSQL_USER=policy_user +MYSQL_PASSWORD=policy_user diff --git a/config/db/db.sh b/config/db/db.sh new file mode 100644 index 00000000..0de1deb1 --- /dev/null +++ b/config/db/db.sh @@ -0,0 +1,9 @@ +#!/bin/bash -xv + +for db in support onap_sdk log +do + mysql -uroot -p"${MYSQL_ROOT_PASSWORD}" --execute "CREATE DATABASE IF NOT EXISTS ${db};" + mysql -uroot -p"${MYSQL_ROOT_PASSWORD}" --execute "GRANT ALL PRIVILEGES ON \`${db}\`.* TO '${MYSQL_USER}'@'%' ;" +done + +mysql -uroot -p"${MYSQL_ROOT_PASSWORD}" --execute "FLUSH PRIVILEGES;" -- cgit 1.2.3-korg