You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
105 lines
3.0 KiB
YAML
105 lines
3.0 KiB
YAML
---
|
|
|
|
### properties:
|
|
### postgres_acls:
|
|
### - name
|
|
### - password
|
|
### - trusted_cidr_entry [shared_service_network]
|
|
|
|
- name: "Add/Remove pg_hba.conf entries for users/nodes/schemas"
|
|
lineinfile:
|
|
state: '{{ database_state }}'
|
|
regex: '^host[ ]+{{ item.name }}[ ]+{{ item.name }}'
|
|
line: 'host {{ item.name }} {{ item.name }} {{ item.trusted_cidr_entry | default(shared_service_network) }} md5'
|
|
path: /etc/postgresql/{{ default_postgres_version }}/main/pg_hba.conf
|
|
notify: pg_reload_conf
|
|
with_items: "{{ postgres_acls }}"
|
|
|
|
- name: "Check roles exist"
|
|
become: yes
|
|
become_user: postgres
|
|
shell: "/usr/bin/psql -Atc \"SELECT count(rolname) FROM pg_roles where rolname='{{ item.name }}'\""
|
|
with_items: "{{ postgres_acls }}"
|
|
register: role_check
|
|
changed_when: "role_check.stdout == '0'"
|
|
when:
|
|
- database_state == 'present'
|
|
|
|
- debug:
|
|
msg: "DEBUGGING: database_state: {{ database_state }}"
|
|
when:
|
|
- debug
|
|
|
|
- name: "Check roles exist result"
|
|
debug:
|
|
msg: "{{ role_check }}"
|
|
when:
|
|
- debug
|
|
|
|
- name: "Create roles if necessary"
|
|
become: yes
|
|
become_user: postgres
|
|
shell: "/usr/bin/psql -c 'CREATE ROLE {{ item.item.name }} LOGIN;'"
|
|
when:
|
|
- database_state == 'present'
|
|
- item.stdout == '0'
|
|
with_items: "{{ role_check.results }}"
|
|
|
|
- name: "Check database exist"
|
|
become: yes
|
|
become_user: postgres
|
|
shell: "/usr/bin/psql -Atc \"SELECT count(*) FROM pg_database WHERE datname = '{{ item.name }}'\""
|
|
with_items: "{{ postgres_acls }}"
|
|
register: database_check
|
|
changed_when: "database_check.stdout == '0'"
|
|
when:
|
|
- database_state == 'present'
|
|
|
|
- name: "Check databases exist result"
|
|
debug:
|
|
msg: "{{ database_check }}"
|
|
when:
|
|
- debug
|
|
|
|
- name: "Create Databases if necessary"
|
|
become: yes
|
|
become_user: postgres
|
|
shell: "/usr/bin/psql -c \"CREATE DATABASE {{ item.item.name }};\""
|
|
when:
|
|
- database_state == 'present'
|
|
- item.stdout == '0'
|
|
with_items: "{{ database_check.results }}"
|
|
|
|
- name: "DROP Databases if necessary"
|
|
become: yes
|
|
become_user: postgres
|
|
shell: '/usr/bin/psql -c "DROP DATABASE {{ item.item.name }} WITH (FORCE);"'
|
|
when:
|
|
- database_state == 'absent'
|
|
with_items: "{{ database_check.results }}"
|
|
|
|
- name: "DROP roles if necessary"
|
|
become: yes
|
|
become_user: postgres
|
|
shell: '/usr/bin/psql -c "DROP ROLE {{ item.item.name }};"'
|
|
when:
|
|
- database_state == 'absent'
|
|
with_items: "{{ role_check.results }}"
|
|
|
|
|
|
- name: "Change password with scram-sha-256! for users and set password"
|
|
become: yes
|
|
become_user: postgres
|
|
shell: "/usr/bin/psql -c \"set password_encryption = 'scram-sha-256';ALTER ROLE {{ item.name }} WITH PASSWORD '{{ item.password }}';\""
|
|
with_items: "{{ postgres_acls }}"
|
|
when:
|
|
- database_state == 'present'
|
|
|
|
- name: "Change owners for databases"
|
|
become: yes
|
|
become_user: postgres
|
|
shell: "/usr/bin/psql -c \"ALTER DATABASE {{ item.name }} OWNER TO {{ item.name }};\""
|
|
with_items: "{{ postgres_acls }}"
|
|
when:
|
|
- database_state == 'present'
|