-
Notifications
You must be signed in to change notification settings - Fork 34
Open
Labels
area/documentationarea/infrastructurearea/securityenvironment/prodIssue affects only production environmentIssue affects only production environmentreadytechdebttrivial
Milestone
Description
We can create special user backup for doing backups. He will have limited amount of permissions and also we can use its password in ~/home/mystamps/.my.cnf file.
The following steps should be done:
backupuser in MySQL should be created (with limited access: only from localhost and it should have permissions that allows to doing backup only)/data/mystamps/.my.cnffile should be updated on the server with new login/password/etc/cron.d/mystampsshould be modified to usebackupusermystamps-backupAnsible role should be updated to reflect this changes- instruction should be updated
Tech debt for: #116
Quote from mysqldump documentation:
mysqldump requires at least the SELECT privilege for dumped tables, SHOW VIEW for dumped views, TRIGGER for dumped triggers, and LOCK TABLES if the --single-transaction option is not used. Certain options might require other privileges as noted in the option descriptions.
Metadata
Metadata
Assignees
Labels
area/documentationarea/infrastructurearea/securityenvironment/prodIssue affects only production environmentIssue affects only production environmentreadytechdebttrivial