소스 검색

[postgres] Need become and become_method now

Colin Powell 3 년 전
부모
커밋
3da0a3c738
1개의 변경된 파일76개의 추가작업 그리고 18개의 파일을 삭제
  1. 76 18
      ansible/roles/postgres/tasks/main.yml

+ 76 - 18
ansible/roles/postgres/tasks/main.yml

@@ -4,39 +4,49 @@
 
 - name: PostgreSQL packages installed
   community.general.pkgng:
-    name: postgresql12-server,postgresql12-client,postgresql12-contrib,py38-psycopg2
+    name: postgresql13-server,postgresql13-client,postgresql13-contrib,py38-pip,rsync
     state: latest
 
-- name: PostgreSQl db initalized
-  shell: /usr/local/etc/rc.d/postgresql initdb
-  ignore_errors: yes
+- name: Psycopg2 installed
+  pip: name=psycopg2 executable=pip
 
 - name: Postgres enabled
   shell: sysrc postgresql_enable="YES"
 
+- name: Postgres initialized
+  shell: initdb --pgdata=/var/db/postgres/data13
+  become: yes
+  become_method: su
+  become_user: postgres
+  ignore_errors: yes
+
 - name: Postgres access file patched
   patch:
     src: pg_hba.conf.patch
-    dest: /var/db/postgres/data12/pg_hba.conf
+    dest: /var/db/postgres/data13/pg_hba.conf
+  become: yes
+  become_method: su
   become_user: postgres
   notify: PostgreSQL restarted
 
 - name: Postgres config file patched
   patch:
     src: postgresql.conf.patch
-    dest: /var/db/postgres/data12/postgresql.conf
+    dest: /var/db/postgres/data13/postgresql.conf
+  become: yes
+  become_method: su
   become_user: postgres
   notify: PostgreSQL restarted
 
 - name: Postgres config file permissions fixed
   file:
-    path: /var/db/postgres/data12/postgresql.conf
+    path: /var/db/postgres/data13/postgresql.conf
     owner: postgres
     group: postgres
 
 - name: Pg_hba config file permissions fixed
   file:
-    path: /var/db/postgres/data12/pg_hba.conf
+    path: /var/db/postgres/data13/pg_hba.conf
     owner: postgres
     group: postgres
 
@@ -61,6 +71,8 @@
     name: "pbp"
     state: present
     owner: pbp
+  become: yes
+  become_method: su
   become_user: postgres
 
 - name: 15Five user exists
@@ -68,6 +80,8 @@
     name: fifteenfive
     password: "{{ fifteenfive_db_pass }}"
     role_attr_flags: CREATEDB,NOSUPERUSER,LOGIN
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -77,6 +91,8 @@
     name: "fifteenfive"
     state: present
     owner: fifteenfive
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -85,6 +101,8 @@
   community.postgresql.postgresql_ext:
     name: btree_gist
     db: fifteenfive
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -93,6 +111,8 @@
   community.postgresql.postgresql_ext:
     name: btree_gin
     db: fifteenfive
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -101,6 +121,8 @@
   community.postgresql.postgresql_ext:
     name: ltree
     db: fifteenfive
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -109,6 +131,8 @@
   community.postgresql.postgresql_ext:
     name: hstore
     db: fifteenfive
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -126,6 +150,8 @@
     name: "gogs"
     state: present
     owner: gogs
+  become: yes
+  become_method: su
   become_user: postgres
 
 - name: miniflux user exists
@@ -133,6 +159,8 @@
     name: miniflux
     password: "{{ miniflux_db_pass }}"
     role_attr_flags: NOSUPERUSER,LOGIN
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -142,6 +170,8 @@
     name: "miniflux"
     state: present
     owner: miniflux
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -151,6 +181,8 @@
     name: photoview
     password: "{{ photoview_db_pass }}"
     role_attr_flags: NOSUPERUSER,LOGIN
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -160,6 +192,8 @@
     name: "photoview"
     state: present
     owner: photoview
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -169,6 +203,8 @@
     name: synapse
     password: "{{ synapse_db_pass }}"
     role_attr_flags: NOSUPERUSER,LOGIN
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -178,6 +214,8 @@
     name: "synapse"
     state: present
     owner: synapse
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -198,21 +236,13 @@
   tags:
     - create_dbs
 
-- name: Give Grafana higher privelages
-  community.postgresql.postgresql_privs:
-    db: postgres
-    privs: SELECT
-    type: schema
-    objs: public
-    role: grafana_read_only
-  tags:
-    - create_dbs
-
 - name: grafana database exists
   community.postgresql.postgresql_db:
     name: "grafana"
     state: present
     owner: grafana
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -222,6 +252,8 @@
     name: sentry
     password: "{{ sentry_db_pass }}"
     role_attr_flags: NOSUPERUSER,LOGIN
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -231,6 +263,30 @@
     name: "sentry"
     state: present
     owner: sentry
+  become: yes
+  become_method: su
+  become_user: postgres
+  tags:
+    - create_dbs
+
+- name: engagement user exists
+  community.postgresql.postgresql_user:
+    name: engagement
+    password: "{{ engagement_db_pass }}"
+    role_attr_flags: NOSUPERUSER,LOGIN
+  become: yes
+  become_method: su
+  become_user: postgres
+  tags:
+    - create_dbs
+
+- name: engagement database exists
+  community.postgresql.postgresql_db:
+    name: "engagement"
+    state: present
+    owner: engagement
+  become: yes
+  become_method: su
   become_user: postgres
   tags:
     - create_dbs
@@ -240,5 +296,7 @@
     name: citext
     db: sentry
   become_user: postgres
+  become_method: su
+  become: yes
   tags:
     - create_dbs