MySQL 8.0: Grant required privileges to xtrabackup user

Author: jan-win1993

manifests/backup/xtrabackup.pp

@@ -67,6 +67,22 @@
         require    => Mysql_user["${backupuser}@localhost"],
       }
     }
+    if versioncmp($facts['mysql_version'], '8') >= 0 {
+      mysql_grant { "${backupuser}@localhost/performance_schema.keyring_component_status":
+        ensure     => $ensure,
+        user       => "${backupuser}@localhost",
+        table      => 'performance_schema.keyring_component_status',
+        privileges => ['SELECT'],
+        require    => Mysql_user["${backupuser}@localhost"],
+      }
+      mysql_grant { "${backupuser}@localhost/performance_schema.log_status":
+        ensure     => $ensure,
+        user       => "${backupuser}@localhost",
+        table      => 'performance_schema.log_status',
+        privileges => ['SELECT'],
+        require    => Mysql_user["${backupuser}@localhost"],
+      }
+    }
   }
 
   if $install_cron {

spec/classes/mysql_backup_xtrabackup_spec.rb

@@ -11,7 +11,8 @@ class { 'mysql::server': }
         EOF
       end
       let(:facts) do
-        facts.merge(root_home: '/root')
+        facts.merge(root_home: '/root',
+                    mysql_version: '5.7')
       end
 
       let(:default_params) do
@@ -113,6 +114,37 @@ class { 'mysql::server': }
               end,
             )
             .that_requires('Mysql_user[backupuser@localhost]')
+
+          is_expected.not_to contain_mysql_grant('backupuser@localhost/performance_schema.keyring_component_status')
+          is_expected.not_to contain_mysql_grant('backupuser@localhost/performance_schema.log_status')
+        end
+
+        context 'with MySQL version 8.0' do
+          let(:facts) do
+            facts.merge(mysql_version: '8.0')
+          end
+
+          it {
+            is_expected.to contain_mysql_grant('backupuser@localhost/performance_schema.keyring_component_status')
+              .with(
+                ensure: 'present',
+                user: 'backupuser@localhost',
+                table: 'performance_schema.keyring_component_status',
+                privileges:
+                  ['SELECT']
+              )
+              .that_requires('Mysql_user[backupuser@localhost]')
+
+            is_expected.to contain_mysql_grant('backupuser@localhost/performance_schema.log_status')
+              .with(
+                ensure: 'present',
+                user: 'backupuser@localhost',
+                table: 'performance_schema.log_status',
+                privileges:
+                  ['SELECT']
+                )
+              .that_requires('Mysql_user[backupuser@localhost]')
+            }
         end
       end