+It fills gaps left by `util.dumpInstance()`, which already exports users, roles, and grants but writes only to a directory, is not idempotent, and cannot filter a single user or host. mysqlexportusers can write a single SQL file with `CREATE USER IF NOT EXISTS`, filter by user or host, and produce a security metadata dump in the same layout as `util.dumpInstance()` without overwriting the Shell's own manifest, plus a JSON inventory of authentication plugins, locks, and SSL settings. A revoke mode reads `SHOW GRANTS` and generates matching `REVOKE` statements for rollback or auditing, and an option converts MariaDB account syntax to MySQL, similar to the `--convert-MariaDB` option of Percona Toolkit's `pt-show-grants`.
0 commit comments