Files
percona/tasks/users.yml

50 lines
1.9 KiB
YAML

---
- name: percona | create legacy users
mysql_user:
name: "{{ item.name }}"
password: "{{ item.password }}"
host: "{{ item.host }}"
priv: "{{ (item.priv | join('/')) if item.priv is iterable and item.priv is not string else (item.priv | default('*.*:USAGE')) }}"
plugin: "mysql_native_password"
state: present
login_user: root
login_password: "{{ percona_root_password }}"
vars:
user_host_pairs: |
{%- set pairs = [] -%}
{%- for user in percona_users -%}
{%- if user.auth_plugin is defined and user.auth_plugin == 'mysql_native_password' -%}
{%- set hosts = [user.host | default('%')] if user.host is undefined or user.host is string else user.host -%}
{%- for host in hosts -%}
{%- set _ = pairs.append(user | combine({'host': host})) -%}
{%- endfor -%}
{%- endif -%}
{%- endfor -%}
{{ pairs }}
loop: "{{ user_host_pairs }}"
- name: percona | create users
mysql_user:
name: "{{ item.name }}"
host: "{{ item.host }}"
priv: "{{ (item.priv | join('/')) if item.priv is iterable and item.priv is not string else (item.priv | default('*.*:USAGE')) }}"
plugin: caching_sha2_password
plugin_auth_string: "{{ item.password }}"
salt: "{{ percona_caching_sha2_password_salt }}"
state: present
login_user: root
login_password: "{{ percona_root_password }}"
vars:
user_host_pairs: |
{%- set pairs = [] -%}
{%- for user in percona_users -%}
{%- if user.auth_plugin is not defined or user.auth_plugin == 'caching_sha2_password' -%}
{%- set hosts = [user.host | default('%')] if user.host is undefined or user.host is string else user.host -%}
{%- for host in hosts -%}
{%- set _ = pairs.append(user | combine({'host': host})) -%}
{%- endfor -%}
{%- endif -%}
{%- endfor -%}
{{ pairs }}
loop: "{{ user_host_pairs }}"