From 911acd2a628e6c9b2e1ac273183520151596db8f Mon Sep 17 00:00:00 2001
From: Christian Berendt <berendt@osism.tech>
Date: Thu, 12 Sep 2024 18:55:39 +0200
Subject: [PATCH] operations-guide: add custom database & user

Signed-off-by: Christian Berendt <berendt@osism.tech>
---
 .../guides/operations-guide/infrastructure.md | 54 +++++++++++++++++++
 1 file changed, 54 insertions(+)

diff --git a/docs/guides/operations-guide/infrastructure.md b/docs/guides/operations-guide/infrastructure.md
index f78bec082a..9e5bf85d50 100644
--- a/docs/guides/operations-guide/infrastructure.md
+++ b/docs/guides/operations-guide/infrastructure.md
@@ -104,6 +104,60 @@ https://docs.openstack.org/kolla-ansible/latest/admin/mariadb-backup-and-restore
 osism apply mariadb_recovery
 ```
 
+### Create database & user
+
+1. Create a custom play `playbook-database-sample.yml` in `environments/kolla` in
+   the configuration repository.
+
+   ```yaml
+   ---
+   - name: Manage sample database
+     hosts: control
+
+     vars:
+       database_sample_username: sample
+       database_sample_name: sample
+
+     tasks:
+       - name: Create sample database
+         become: true
+         kolla_toolbox:
+           container_engine: "{{ kolla_container_engine }}"
+           module_name: mysql_db
+           module_args:
+             login_host: "{{ database_address }}"
+             login_port: "{{ database_port }}"
+             login_user: "root"
+             login_password: "{{ database_password }}"
+             name: "{{ database_sample_name }}"
+         run_once: true
+
+       - name: Create sample user
+         become: true
+         kolla_toolbox:
+           container_engine: "{{ kolla_container_engine }}"
+           module_name: mysql_user
+           module_args:
+             login_host: "{{ api_interface_address }}"
+             login_port: "{{ mariadb_port }}"
+             login_user: "root"
+             login_password: "{{ database_password }}"
+             name: "{{ database_sample_username }}"
+             password: "{{ database_sample_password }}"
+             host: "%"
+             priv: "{{ database_sample_name }}.*:ALL"
+             append_privs: True
+         run_once: true
+   ```
+
+2. Add secret `database_sample_password` in `environments/kolla/secrets.yml` in the
+   configuration repository.
+
+3. Commit the custom play and the secret. Sync the configuration on the manager
+   node with `osism apply configuration`.
+
+4. Run `osism apply xxx` on the manager node.
+
 ## Open Search
 
 ### Get all indices