mysql> show status like 'wsrep_cluster%';
+--------------------------+--------------------------------------+
| Variable_name | Value |
+--------------------------+--------------------------------------+
| wsrep_cluster_conf_id | 3 |
| wsrep_cluster_size | 3 |
| wsrep_cluster_state_uuid | 57c2a09d-a2ab-11e4-addc-979d5ab3b3ac |
| wsrep_cluster_status | Primary |
+--------------------------+--------------------------------------+
ubuntu@db01:~$ pt-show-grants -uroot -pubuntu | grep glance
-- Grants for 'glance'@'10.100.1.170'
GRANT USAGE ON *.* TO 'glance'@'10.100.1.170' IDENTIFIED BY PASSWORD '*3F5426F710A7D88B2337302C169A453136248B15';
GRANT ALL PRIVILEGES ON `glance`.* TO 'glance'@'10.100.1.170';
-- Grants for 'glance'@'10.100.1.171'
GRANT USAGE ON *.* TO 'glance'@'10.100.1.171' IDENTIFIED BY PASSWORD '*3F5426F710A7D88B2337302C169A453136248B15';
GRANT ALL PRIVILEGES ON `glance`.* TO 'glance'@'10.100.1.171';
-- Grants for 'glance'@'172.100.2.99'
GRANT USAGE ON *.* TO 'glance'@'172.100.2.99' IDENTIFIED BY PASSWORD '*3F5426F710A7D88B2337302C169A453136248B15';
GRANT ALL PRIVILEGES ON `glance`.* TO 'glance'@'172.100.2.99';
as you see this result, only one glance node didn't get grant thorugh public network in db.
ohter services are all fine to sync databases. (even another glance node got the grant )
juju resolve still failed to resolve because of grant
Edward, this is the result as you mentioned
mysql> show status like 'wsrep_cluster%'; ------- ------- ------+ ------- ------- ------- ------- ------- ---+ ------- ------- ------+ ------- ------- ------- ------- ------- ---+ conf_id | 3 | state_uuid | 57c2a09d- a2ab-11e4- addc-979d5ab3b3 ac | status | Primary | ------- ------- ------+ ------- ------- ------- ------- ------- ---+
+------
| Variable_name | Value |
+------
| wsrep_cluster_
| wsrep_cluster_size | 3 |
| wsrep_cluster_
| wsrep_cluster_
+------
ubuntu@db01:~$ pt-show-grants -uroot -pubuntu | grep glance @'10.100. 1.170' @'10.100. 1.170' IDENTIFIED BY PASSWORD '*3F5426F710A7D 88B2337302C169A 453136248B15' ; @'10.100. 1.170'; @'10.100. 1.171' @'10.100. 1.171' IDENTIFIED BY PASSWORD '*3F5426F710A7D 88B2337302C169A 453136248B15' ; @'10.100. 1.171'; @'172.100. 2.99' @'172.100. 2.99' IDENTIFIED BY PASSWORD '*3F5426F710A7D 88B2337302C169A 453136248B15' ; @'172.100. 2.99';
-- Grants for 'glance'
GRANT USAGE ON *.* TO 'glance'
GRANT ALL PRIVILEGES ON `glance`.* TO 'glance'
-- Grants for 'glance'
GRANT USAGE ON *.* TO 'glance'
GRANT ALL PRIVILEGES ON `glance`.* TO 'glance'
-- Grants for 'glance'
GRANT USAGE ON *.* TO 'glance'
GRANT ALL PRIVILEGES ON `glance`.* TO 'glance'
mysql> select host,user from user; ------- --+---- ------- ------- + ------- --+---- ------- ------- + ------- --+---- ------- ------- +
+------
| host | user |
+------
| 10.100.1.161 | keystone |
| 10.100.1.162 | keystone |
| 10.100.1.164 | neutron |
| 10.100.1.164 | nova |
| 10.100.1.165 | neutron |
| 10.100.1.165 | nova |
| 10.100.1.170 | glance |
| 10.100.1.171 | glance |
| 10.100.1.172 | cinder |
| 10.100.1.173 | cinder |
| 127.0.0.1 | root |
| 172.100.2.103 | neutron |
| 172.100.2.103 | nova |
| 172.100.2.105 | cinder |
| 172.100.2.106 | neutron |
| 172.100.2.106 | nova |
| 172.100.2.95 | cinder |
| 172.100.2.96 | keystone |
| 172.100.2.97 | keystone |
| 172.100.2.99 | glance |
| ::1 | root |
| db01 | root |
| ip6-localhost | sstuser |
| localhost | debian-sys-maint |
| localhost | root |
| localhost | sstuser |
+------
26 rows in set (0.00 sec)
as you see this result, only one glance node didn't get grant thorugh public network in db.
ohter services are all fine to sync databases. (even another glance node got the grant )
juju resolve still failed to resolve because of grant