document intend of refreshonyl for setting root pw

1 files changed, 2 insertions, 0 deletions

diff --git a/manifests/server/base.pp b/manifests/server/base.pp
index 23d2f35..8bdd865 100644
--- a/manifests/server/base.pp
+++ b/manifests/server/base.pp
@@ -59,6 +59,8 @@ class mysql::server::base {
     command     => '/usr/local/sbin/setmysqlpass.sh',
     unless      => 'mysqladmin -uroot status > /dev/null',
     require     => [ File['mysql_setmysqlpass.sh'], Service['mysql'] ],
+    # this is for security so that we only change the password
+    # if the password file itself has changed
     refreshonly => true,
   }