Alauda Database Service for MySQL-MGR

User Management

TOC

Feature OverviewProcedure

Feature Overview

Provides complete user lifecycle management, including creation, permission assignment, password modification, and deletion operations.

Procedure

CLI
Web Console

  1. Create User Password

    kubectl -n ${namespace} create secret generic mgr-${instance_name}-${username}-password \
--from-literal=host="%" \
--from-literal=user=${username} \
--from-literal=password=${password}
    Info
    • ${instance_name} is the desired MySQL-MGR instance name for the user to be created
    • ${namespace} is the namespace to which the instance belongs
    • ${username} is the desired username to be created
    • ${password} is the desired password to be set

  2. Create User Management CR

    kubectl apply -n ${namespace} -f - <<EOF
apiVersion: middleware.alauda.io/v1
kind: MysqlUser
metadata:
  labels:
    mgr/cluster: mgr
    mysql/arch: mgr
  name: ${name}
  namespace: ${namespace}
spec:
  host: '%'
  mysql: ${instance_name}
  privileges:
    - grants:
        - SELECT
        - INSERT
        - UPDATE
        - DELETE
        - CREATE
        - DROP
        - REFERENCES
        - INDEX
        - ALTER
        - CREATE TEMPORARY TABLES
        - LOCK TABLES
        - CREATE VIEW
        - SHOW VIEW
        - CREATE ROUTINE
        - ALTER ROUTINE
        - EXECUTE
        - EVENT
        - TRIGGER
      targets:
        - ${database}.*
  secretName: ${secret_name}
  user: ${username}
EOF
    Info
    • ${instance_name} is the desired MySQL-MGR instance name for the user to be created
    • ${namespace} is the namespace to which the instance belongs
    • ${username} is the desired username to be created
    • ${secret_name} is the secret name for carrying the password
    • ${database} is the desired database name for the user to be created

  3. Log in to MySQL using the corresponding user

  4. Check user permissions, example for user dev:

    SHOW GRANTS;

    Result will show:

    +----------------------------------------------+
| Grants for dev@%                             |
+----------------------------------------------+
| GRANT USAGE ON *.* TO `dev`@`%`              |
| GRANT ALL PRIVILEGES ON `dev`.* TO `dev`@`%` |
+----------------------------------------------+