From 4c5e403ae89ebd8475145322a3068d518cd7c636 Mon Sep 17 00:00:00 2001
From: Jeffrey Zhang <zhang.lei.fly@gmail.com>
Date: Thu, 8 Feb 2018 14:43:40 +0800
Subject: [PATCH] Allow normal user to create functions during databas sync in
 glance

Closes-Bug: #1748347
Change-Id: I9fffc86e7c69ac5edb93c88636e7d49f73544d85
---
 .../roles/glance/tasks/bootstrap_service.yml  | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/ansible/roles/glance/tasks/bootstrap_service.yml b/ansible/roles/glance/tasks/bootstrap_service.yml
index ae311e427a..4a6100fa6e 100644
--- a/ansible/roles/glance/tasks/bootstrap_service.yml
+++ b/ansible/roles/glance/tasks/bootstrap_service.yml
@@ -1,4 +1,19 @@
 ---
+- name: Enable log_bin_trust_function_creators function
+  vars:
+    glance_api: "{{ glance_services['glance-api'] }}"
+  kolla_toolbox:
+    module_name: mysql_variables
+    module_args:
+      login_host: "{{ database_address }}"
+      login_port: "{{ database_port }}"
+      login_user: "{{ database_user }}"
+      login_password: "{{ database_password }}"
+      variable: log_bin_trust_function_creators
+      value: 1
+  run_once: True
+  delegate_to: "{{ groups[glance_api.group][0] }}"
+
 - name: Running Glance bootstrap container
   vars:
     glance_api: "{{ glance_services['glance-api'] }}"
@@ -17,3 +32,18 @@
     volumes: "{{ glance_api.volumes }}"
   run_once: True
   delegate_to: "{{ groups[glance_api.group][0] }}"
+
+- name: Disable log_bin_trust_function_creators function
+  vars:
+    glance_api: "{{ glance_services['glance-api'] }}"
+  kolla_toolbox:
+    module_name: mysql_variables
+    module_args:
+      login_host: "{{ database_address }}"
+      login_port: "{{ database_port }}"
+      login_user: "{{ database_user }}"
+      login_password: "{{ database_password }}"
+      variable: log_bin_trust_function_creators
+      value: 0
+  run_once: True
+  delegate_to: "{{ groups[glance_api.group][0] }}"