Use configuration to specify whether db users are granted to localhost or %

docker/build/course-discovery/ansible_overrides.yml

@@ -3,4 +3,5 @@ course_discovery_gunicorn_host: 0.0.0.0
 COURSE_DISCOVERY_MYSQL: 'db'
 COURSE_DISCOVERY_DJANGO_SETTINGS_MODULE: 'course_discovery.settings.devstack'
 COURSE_DISCOVERY_ELASTICSEARCH_HOST: 'es'
+COURSE_DISCOVERY_MYSQL_LOGIN_HOST: '%'
 

docker/build/credentials/ansible_overrides.yml

@@ -2,4 +2,5 @@
 credentials_gunicorn_host: 127.0.0.1
 CREDENTIALS_MYSQL: 'db'
 CREDENTIALS_DJANGO_SETTINGS_MODULE: 'credentials.settings.devstack'
+CREDENTIALS_MYSQL_LOGIN_HOST: '%'
 

playbooks/roles/ansible-role-django-ida/templates/defaults/main.yml.j2

@@ -32,6 +32,7 @@
 
 {{ role_name|upper }}_DB_ADMIN_USER: 'root'
 {{ role_name|upper }}_DB_ADMIN_PASSWORD: ''
+{{ role_name|upper }}_MYSQL_LOGIN_HOST: 'localhost'
 
 {{ role_name|upper }}_MEMCACHE: [ 'memcache' ]
 

playbooks/roles/ansible-role-django-ida/templates/docker/build/ROLE_NAME/ansible_overrides.yml.j2

@@ -2,4 +2,5 @@
 {{ role_name }}_gunicorn_host: 127.0.0.1
 {{ role_name|upper }}_MYSQL: 'db'
 {{ role_name|upper }}_DJANGO_SETTINGS_MODULE: '{{ role_name }}.settings.devstack'
+{{ role_name|upper }}_MYSQL_LOGIN_HOST: '%'
 

playbooks/roles/ansible-role-django-ida/templates/tasks/main.yml.j2

@@ -80,7 +80,7 @@
     login_user: "{{ '{{' }} {{ role_name|upper }}_DB_ADMIN_USER }}"
     login_password: "{{ '{{' }} {{ role_name|upper }}_DB_ADMIN_PASSWORD }}"
     name: "{{ '{{' }} item.name }}"
-    host: "%"
+    host: "{{ '{{' }} {{ role_name|upper }}_MYSQL_LOGIN_HOST }}"
     password: "{{ '{{' }} item.password }}"
     priv: "{{ '{{' }} {{ role_name|upper }}_DEFAULT_DB_NAME }}.*:ALL"
   with_items:

playbooks/roles/course_discovery/defaults/main.yml

@@ -46,6 +46,7 @@ COURSE_DISCOVERY_ELASTICSEARCH:
 
 COURSE_DISCOVERY_DB_ADMIN_USER: 'root'
 COURSE_DISCOVERY_DB_ADMIN_PASSWORD: ''
+COURSE_DISCOVERY_MYSQL_LOGIN_HOST: 'localhost'
 
 COURSE_DISCOVERY_MEMCACHE: [ 'memcache' ]
 

playbooks/roles/course_discovery/tasks/main.yml

@@ -102,7 +102,7 @@
     login_user: "{{ COURSE_DISCOVERY_DB_ADMIN_USER }}"
     login_password: "{{ COURSE_DISCOVERY_DB_ADMIN_PASSWORD }}"
     name: "{{ item.name }}"
-    host: "%"
+    host: "{{ COURSE_DISCOVERY_MYSQL_LOGIN_HOST }}"
     password: "{{ item.password }}"
     priv: "{{ COURSE_DISCOVERY_DEFAULT_DB_NAME }}.*:ALL"
   with_items:

playbooks/roles/credentials/defaults/main.yml

@@ -39,6 +39,7 @@ CREDENTIALS_DATABASES:
 
 CREDENTIALS_DB_ADMIN_USER: 'root'
 CREDENTIALS_DB_ADMIN_PASSWORD: ''
+CREDENTIALS_MYSQL_LOGIN_HOST: 'localhost'
 
 CREDENTIALS_MEMCACHE: [ 'memcache' ]
 

playbooks/roles/credentials/tasks/main.yml

@@ -96,7 +96,7 @@
     login_user: "{{ CREDENTIALS_DB_ADMIN_USER }}"
     login_password: "{{ CREDENTIALS_DB_ADMIN_PASSWORD }}"
     name: "{{ item.name }}"
-    host: "%"
+    host: "{{ CREDENTIALS_MYSQL_LOGIN_HOST }}"
     password: "{{ item.password }}"
     priv: "{{ CREDENTIALS_DEFAULT_DB_NAME }}.*:ALL"
   with_items: