You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
100 lines
3.0 KiB
YAML
100 lines
3.0 KiB
YAML
---
|
|
|
|
### tags:
|
|
|
|
- name: Update
|
|
apt: update_cache=yes force_apt_get=yes cache_valid_time=3600
|
|
|
|
- name: MariaDB | install
|
|
package:
|
|
name: "{{ item }}"
|
|
state: latest
|
|
with_items:
|
|
- mariadb-server
|
|
- python3-pymysql
|
|
- prometheus-mysqld-exporter
|
|
|
|
- name: Stop prometheus-mysqld-exporter
|
|
service:
|
|
name: prometheus-mysqld-exporter
|
|
state: stopped
|
|
enabled: no
|
|
|
|
- name: Fix binding..
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/mysql/mariadb.conf.d/50-server.cnf
|
|
regexp: '^bind-address'
|
|
line: 'bind-address={{ ansible_all_ipv4_addresses | ansible.netcommon.ipaddr(shared_service_network) | first }}'
|
|
|
|
- name: Ensure service is started
|
|
service:
|
|
name: mariadb
|
|
state: restarted
|
|
enabled: yes
|
|
|
|
- name: Check if root password is set
|
|
shell: >
|
|
mysqladmin -u root status
|
|
changed_when: false
|
|
failed_when: false
|
|
register: root_pwd_check
|
|
|
|
- name: Set MariaDB root password for the first time
|
|
community.mysql.mysql_user:
|
|
name: root
|
|
password: "{{ mysql_root_password }}"
|
|
host_all: yes
|
|
login_unix_socket: /var/run/mysqld/mysqld.sock
|
|
state: present
|
|
when: root_pwd_check.rc == 0
|
|
|
|
- name: Ensure MySQL databases are present.
|
|
community.mysql.mysql_db:
|
|
name: "{{ item.name }}"
|
|
collation: "{{ item.collation | default('utf8_general_ci') }}"
|
|
encoding: "{{ item.encoding | default('utf8') }}"
|
|
state: "{{ item.state | default('present') }}"
|
|
config_file: "/etc/mysql/mariadb.conf.d/50-client.cnf"
|
|
login_password: "{{ mysql_root_password }}"
|
|
with_items: "{{ mysql_databases }}"
|
|
|
|
- name: Ensure MySQL users are present.
|
|
community.mysql.mysql_user:
|
|
name: "{{ item.name }}"
|
|
password: "{{ item.password }}"
|
|
priv: "{{ item.priv | default('*.*:USAGE') }}"
|
|
state: "{{ item.state | default('present') }}"
|
|
append_privs: "{{ item.append_privs | default('no') }}"
|
|
encrypted: "{{ item.encrypted | default('no') }}"
|
|
config_file: "/etc/mysql/mariadb.conf.d/50-client.cnf"
|
|
login_password: "{{ mysql_root_password }}"
|
|
host: "{{ item.host }}"
|
|
with_items: "{{ mysql_users }}"
|
|
|
|
- name: Ensure prometheus user for prometheus-mysqld-exporter exists
|
|
community.mysql.mysql_user:
|
|
name: "prometheus"
|
|
priv: "*.*:PROCESS,REPLICATION CLIENT,SELECT"
|
|
config_file: "/etc/mysql/mariadb.conf.d/50-client.cnf"
|
|
login_password: "{{ mysql_root_password }}"
|
|
|
|
- name: Ensure is prometheus-mysqld-exporter configured
|
|
lineinfile:
|
|
regex: "^DATA_SOURCE_NAME="
|
|
line: 'DATA_SOURCE_NAME="prometheus@unix(/run/mysqld/mysqld.sock)/"'
|
|
path: /etc/default/prometheus-mysqld-exporter
|
|
register: mysql_exporter_data_source
|
|
|
|
- name: Setup prometheus-mysqld-exporter interface bind
|
|
lineinfile:
|
|
path: /etc/default/prometheus-mysqld-exporter
|
|
regex: "^ARGS="
|
|
line: "ARGS=\"--web.listen-address='{{ stage_private_server_ip }}:{{ monitor_port_maria }}'\""
|
|
register: mysql_exporter_args
|
|
|
|
- name: Start prometheus-mysqld-exporter if needed
|
|
service:
|
|
name: prometheus-mysqld-exporter
|
|
state: started
|
|
enabled: yes
|