Operator expects root@% to exist


operator user keeps trying to change password exipre policy on root@%




2024-06-03T13:44:20.860Z ERROR Reconciler error {“controller”: “pxc-controller”, “namespace”: “percona”, “name”: “database”, “reconcileID”: “1-1-1-1”, “error”: “reconcile users │
│ : manage sys users: update root user password expiration policy: Error 1396 (HY000): Operation ALTER USER failed for ‘root’@‘%’”, “errorVerbose”: "Error 1396 (HY000): Operation ALTER USER failed for ‘root’@‘%’\nupdate

is there a way to not have a root user with full access from %

Hi @Freddy
We have two rows for the root user: one is a system user root@localhost and the second one is root@% . It is not a system user and this user has almost the same privileges e.g. as a default RDS admin user:

                 Host: %
                  User: admin
           Select_priv: Y
           Insert_priv: Y
           Update_priv: Y
           Delete_priv: Y
           Create_priv: Y
             Drop_priv: Y
           Reload_priv: Y
         Shutdown_priv: N
          Process_priv: Y
             File_priv: N
            Grant_priv: Y
       References_priv: Y
            Index_priv: Y
            Alter_priv: Y
          Show_db_priv: Y
            Super_priv: N
 Create_tmp_table_priv: Y
      Lock_tables_priv: Y
          Execute_priv: Y
       Repl_slave_priv: Y
      Repl_client_priv: Y
      Create_view_priv: Y
        Show_view_priv: Y
   Create_routine_priv: Y
    Alter_routine_priv: Y
      Create_user_priv: Y
            Event_priv: Y
          Trigger_priv: Y
Create_tablespace_priv: N