vitess.io/vitess@v0.16.2/config/init_db.sql (about)

     1  # This file is executed immediately after mysql_install_db,
     2  # to initialize a fresh data directory.
     3  
     4  ###############################################################################
     5  # WARNING: This sql is *NOT* safe for production use,
     6  #          as it contains default well-known users and passwords.
     7  #          Care should be taken to change these users and passwords
     8  #          for production.
     9  ###############################################################################
    10  
    11  ###############################################################################
    12  # Equivalent of mysql_secure_installation
    13  ###############################################################################
    14  
    15  # Changes during the init db should not make it to the binlog.
    16  # They could potentially create errant transactions on replicas.
    17  SET sql_log_bin = 0;
    18  # Remove anonymous users.
    19  DELETE FROM mysql.user WHERE User = '';
    20  
    21  # Disable remote root access (only allow UNIX socket).
    22  DELETE FROM mysql.user WHERE User = 'root' AND Host != 'localhost';
    23  
    24  # Remove test database.
    25  DROP DATABASE IF EXISTS test;
    26  
    27  ###############################################################################
    28  # Vitess defaults
    29  ###############################################################################
    30  
    31  # Admin user with all privileges.
    32  CREATE USER 'vt_dba'@'localhost';
    33  GRANT ALL ON *.* TO 'vt_dba'@'localhost';
    34  GRANT GRANT OPTION ON *.* TO 'vt_dba'@'localhost';
    35  
    36  # User for app traffic, with global read-write access.
    37  CREATE USER 'vt_app'@'localhost';
    38  GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, FILE,
    39    REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES,
    40    LOCK TABLES, EXECUTE, REPLICATION CLIENT, CREATE VIEW,
    41    SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER
    42    ON *.* TO 'vt_app'@'localhost';
    43  
    44  # User for app debug traffic, with global read access.
    45  CREATE USER 'vt_appdebug'@'localhost';
    46  GRANT SELECT, SHOW DATABASES, PROCESS ON *.* TO 'vt_appdebug'@'localhost';
    47  
    48  # User for administrative operations that need to be executed as non-SUPER.
    49  # Same permissions as vt_app here.
    50  CREATE USER 'vt_allprivs'@'localhost';
    51  GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, FILE,
    52    REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES,
    53    LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW,
    54    SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER
    55    ON *.* TO 'vt_allprivs'@'localhost';
    56  
    57  # User for slave replication connections.
    58  CREATE USER 'vt_repl'@'%';
    59  GRANT REPLICATION SLAVE ON *.* TO 'vt_repl'@'%';
    60  
    61  # User for Vitess VReplication (base vstreamers and vplayer).
    62  CREATE USER 'vt_filtered'@'localhost';
    63  GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, FILE,
    64    REFERENCES, INDEX, ALTER, SHOW DATABASES, CREATE TEMPORARY TABLES,
    65    LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW,
    66    SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER
    67    ON *.* TO 'vt_filtered'@'localhost';
    68  
    69  # User for general MySQL monitoring.
    70  CREATE USER 'vt_monitoring'@'localhost';
    71  GRANT SELECT, PROCESS, SUPER, REPLICATION CLIENT, RELOAD
    72    ON *.* TO 'vt_monitoring'@'localhost';
    73  GRANT SELECT, UPDATE, DELETE, DROP
    74    ON performance_schema.* TO 'vt_monitoring'@'localhost';
    75  
    76  FLUSH PRIVILEGES;
    77  
    78  RESET SLAVE ALL;
    79  RESET MASTER;