From: Yanis Guenane <yguenane@redhat.com>
Date: Tue, 4 Aug 2015 11:05:38 +0000 (+0200)
Subject: Ensure mysql root can only connect from localhost
X-Git-Tag: opnfv-6.0.0~2396^2
X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=commitdiff_plain;h=d91ef06d2f9e68549d66e0887e0b32a6a137de3e;p=apex-tripleo-heat-templates.git

Ensure mysql root can only connect from localhost

Currently mysql root user can connect in a passwordless way from :

  * localhost
  * 127.0.0.1
  * ::1
  * <HOSTNAME>

This patch ensures that the mysql root user can connect only from localhost.

Change-Id: If64fd383737c2fbeed4adbe8d98b1f92610956b2
---

diff --git a/puppet/hieradata/controller.yaml b/puppet/hieradata/controller.yaml
index 1ae076d2..fdbaf716 100644
--- a/puppet/hieradata/controller.yaml
+++ b/puppet/hieradata/controller.yaml
@@ -98,6 +98,7 @@ horizon::django_session_engine: 'django.contrib.sessions.backends.cache'
 
 # mysql
 mysql::server::manage_config_file: true
+mysql::server::remove_default_accounts: true
 
 
 tripleo::loadbalancer::keystone_admin: true