Read only mysql access in cloudron - possible?

[dsp76]

Grafana recommends using a read-only user for accessing mysql databases for reporting. Absolutely valuable recommendation, as it would execute any given sql statement when setting up queries.

Is there a way to have a restricted access for Grafana?

I read the instruction from here:
https://docs.cloudron.io/guides/connect-mysql/#database-credentials

If there is no way currently, I should add it as a feature request.
Would be great to have an read only access too.

[nebulon]

Those credentials for the app itself need to be read+write. But I guess your use-case is to use an external mysql within Grafana?

[dsp76]

Yes - I want to use Grafana, installed via Cloudron, to check some apps' mySQL databases.

[nebulon]

Currently we only create one credentialset for each app using the mysql database. For your use-case only those can be used right now. For monitoring the mysql instance (which is one for all apps) maybe a single read-only credentialset should to be created for grafana, being able to access all database not just per-app. But also that is not supported out of the box right now.

I will move this to the feature request section then instead.

[dsp76]

That would make things even easier
But adding that user is also out of reach for me as Cloudron admin?

[nebulon]

You should be able to create such a user if you operate with the mysql admin credentials which exist in the mysql service container. You can get a terminal into that via docker exec -ti mysql /bin/bash in an SSH session to the host system. However probably don't play around with this in a production system for a start.