diff --git a/collections/requirements.yml b/collections/requirements.yml index 869cbdc..8688782 100644 --- a/collections/requirements.yml +++ b/collections/requirements.yml @@ -12,7 +12,6 @@ collections: - name: 'community.grafana' - name: 'community.hashi_vault' - name: 'community.libvirt' - - name: 'community.mysql' - name: 'community.postgresql' - name: 'community.proxysql' - name: 'community.rabbitmq' diff --git a/roles/ensure_mariadb/tasks/main.yml b/roles/ensure_mariadb/tasks/main.yml index 4ba0c20..532baae 100644 --- a/roles/ensure_mariadb/tasks/main.yml +++ b/roles/ensure_mariadb/tasks/main.yml @@ -1,11 +1,11 @@ --- # tasks file for ensure_mariadb -- name: 'include variables' +- name: "include variables" when: - ansible_facts["system"] == 'Linux' ansible.builtin.include_vars: file: '{{ lookup("first_found", findme) }}' - name: 'ensure_mariadb' + name: "ensure_mariadb" vars: findme: files: @@ -15,102 +15,102 @@ - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml' - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml' - '{{ ansible_facts["os_family"] }}-default.yml' - - 'default.yml' + - "default.yml" paths: - - '../vars/' - errors: 'ignore' -- name: 'package discovery' + - "../vars/" + errors: "ignore" +- name: "package discovery" when: - ansible_facts["system"] == 'Linux' - ansible_facts["packages"] is not defined ansible.builtin.package_facts: -- name: 'service discovery' +- name: "service discovery" when: - ansible_facts["system"] == 'Linux' - ansible_facts["services"] is not defined ansible.builtin.service_facts: -- name: 'ensure sysctl' +- name: "ensure sysctl" when: - ansible_facts["system"] == 'Linux' - ensure_mariadb is defined - ensure_mariadb.sysctl_list is defined - ensure_mariadb.sysctl_list is iterable ansible.posix.sysctl: - name: '{{ item.name }}' - reload: '{{ item.reload | default(omit) }}' - state: '{{ item.state }}' - sysctl_file: '{{ item.sysctl_file | default(omit) }}' - sysctl_set: '{{ item.sysctl_set | default(omit) }}' - value: '{{ item.value | default(omit) }}' - loop: '{{ ensure_mariadb.sysctl_list }}' + name: "{{ item.name }}" + reload: "{{ item.reload | default(omit) }}" + state: "{{ item.state }}" + sysctl_file: "{{ item.sysctl_file | default(omit) }}" + sysctl_set: "{{ item.sysctl_set | default(omit) }}" + value: "{{ item.value | default(omit) }}" + loop: "{{ ensure_mariadb.sysctl_list }}" loop_control: - label: '{{ item.name }} will be {{ item.value }}' + label: "{{ item.name }} will be {{ item.value }}" notify: - - 'ensure_mariadb.package_facts' - - 'ensure_mariadb.service_facts' - - 'ensure_mariadb.service_reload' - - 'ensure_mariadb.service_restart' -- name: 'ensure packages' + - "ensure_mariadb.package_facts" + - "ensure_mariadb.service_facts" + - "ensure_mariadb.service_reload" + - "ensure_mariadb.service_restart" +- name: "ensure packages" when: - ansible_facts["system"] == 'Linux' - ensure_mariadb is defined - ensure_mariadb.package_list is defined - ensure_mariadb.package_list is iterable ansible.builtin.package: - name: '{{ item.name }}' - state: '{{ item.state }}' - loop: '{{ ensure_mariadb.package_list }}' + name: "{{ item.name }}" + state: "{{ item.state }}" + loop: "{{ ensure_mariadb.package_list }}" loop_control: - label: '{{ item.name }} will be {{ item.state }}' + label: "{{ item.name }} will be {{ item.state }}" notify: - - 'ensure_mariadb.package_facts' - - 'ensure_mariadb.service_facts' - - 'ensure_mariadb.service_reload' - - 'ensure_mariadb.service_restart' -- name: 'ensure seboolean' + - "ensure_mariadb.package_facts" + - "ensure_mariadb.service_facts" + - "ensure_mariadb.service_reload" + - "ensure_mariadb.service_restart" +- name: "ensure seboolean" when: - ansible_facts["system"] == 'Linux' - ensure_mariadb is defined - ensure_mariadb.seboolean_list is defined - ensure_mariadb.seboolean_list is iterable ansible.posix.seboolean: - name: '{{ item.name }}' - persistent: '{{ item.persistent }}' - state: '{{ item.state }}' - loop: '{{ ensure_mariadb.seboolean_list }}' + name: "{{ item.name }}" + persistent: "{{ item.persistent }}" + state: "{{ item.state }}" + loop: "{{ ensure_mariadb.seboolean_list }}" loop_control: - label: '{{ item.name }} will be {{ item.state }}' + label: "{{ item.name }} will be {{ item.state }}" notify: - - 'ensure_mariadb.package_facts' - - 'ensure_mariadb.service_facts' - - 'ensure_mariadb.service_reload' - - 'ensure_mariadb.service_restart' -- name: 'ensure configurations' + - "ensure_mariadb.package_facts" + - "ensure_mariadb.service_facts" + - "ensure_mariadb.service_reload" + - "ensure_mariadb.service_restart" +- name: "ensure configurations" when: - ansible_facts["system"] == 'Linux' - ensure_mariadb is defined - ensure_mariadb.template_list is defined - ensure_mariadb.template_list is iterable ansible.builtin.template: - backup: 'no' - dest: '{{ item.dest }}' - group: '{{ item.group | default(omit) }}' - mode: '{{ item.mode | default(omit) }}' - owner: '{{ item.owner | default(omit) }}' - selevel: '{{ iteml.selevel | default(omit) }}' - serole: '{{ item.serole | default(omit) }}' - setype: '{{ item.setype | default(omit) }}' - seuser: '{{ item.seuser | default(omit) }}' - src: '{{ item.src }}' - loop: '{{ ensure_mariadb.template_list }}' + backup: "no" + dest: "{{ item.dest }}" + group: "{{ item.group | default(omit) }}" + mode: "{{ item.mode | default(omit) }}" + owner: "{{ item.owner | default(omit) }}" + selevel: "{{ iteml.selevel | default(omit) }}" + serole: "{{ item.serole | default(omit) }}" + setype: "{{ item.setype | default(omit) }}" + seuser: "{{ item.seuser | default(omit) }}" + src: "{{ item.src }}" + loop: "{{ ensure_mariadb.template_list }}" loop_control: - label: '{{ item.dest }} will be ensured' + label: "{{ item.dest }} will be ensured" notify: - - 'ensure_mariadb.package_facts' - - 'ensure_mariadb.service_facts' - - 'ensure_mariadb.service_reload' - - 'ensure_mariadb.service_restart' -- name: 'ensure firewall' + - "ensure_mariadb.package_facts" + - "ensure_mariadb.service_facts" + - "ensure_mariadb.service_reload" + - "ensure_mariadb.service_restart" +- name: "ensure firewall" when: - ansible_facts["system"] == 'Linux' - ansible_facts.packages["firewalld"] is defined @@ -119,120 +119,117 @@ - ensure_mariadb.firewall_list is defined - ensure_mariadb.firewall_list is iterable ansible.posix.firewalld: - permanent: '{{ item.permanent }}' - service: '{{ item.service }}' - state: '{{ item.state }}' - loop: '{{ ensure_mariadb.firewall_list }}' + permanent: "{{ item.permanent }}" + service: "{{ item.service }}" + state: "{{ item.state }}" + loop: "{{ ensure_mariadb.firewall_list }}" loop_control: - label: '{{ item.service }} will be {{ item.state }}' + label: "{{ item.service }} will be {{ item.state }}" notify: - - 'ensure_mariadb.package_facts' - - 'ensure_mariadb.service_facts' - - 'ensure_mariadb.service_reload' - - 'ensure_mariadb.service_restart' -- name: 'ensure services' + - "ensure_mariadb.package_facts" + - "ensure_mariadb.service_facts" + - "ensure_mariadb.service_reload" + - "ensure_mariadb.service_restart" +- name: "ensure services" when: - ansible_facts["system"] == 'Linux' - ensure_mariadb is defined - ensure_mariadb.service_list is defined - ensure_mariadb.service_list is iterable ansible.builtin.service: - enabled: '{{ item.enabled }}' - name: '{{ item.name }}' - state: '{{ item.state }}' - loop: '{{ ensure_mariadb.service_list }}' + enabled: "{{ item.enabled }}" + name: "{{ item.name }}" + state: "{{ item.state }}" + loop: "{{ ensure_mariadb.service_list }}" loop_control: - label: '{{ item.name }} will be {{ item.state }}' + label: "{{ item.name }} will be {{ item.state }}" notify: - - 'ensure_mariadb.package_facts' - - 'ensure_mariadb.service_facts' - - 'ensure_mariadb.service_reload' - - 'ensure_mariadb.service_restart' -- name: 'flush handlers' - ansible.builtin.meta: 'flush_handlers' -- name: 'ensure mariadb databases' + - "ensure_mariadb.package_facts" + - "ensure_mariadb.service_facts" + - "ensure_mariadb.service_reload" + - "ensure_mariadb.service_restart" +- name: "flush handlers" + ansible.builtin.meta: "flush_handlers" +- name: "ensure mariadb databases" when: - mariadb_db_list is defined - mariadb_db_list is iterable - community.mysql.mysql_db: - ca_cert: '{{ item.ca_cert | default(omit) }}' - chdir: '{{ item.chdir | default(omit) }}' - check_hostname: '{{ item.check_hostname | default(omit) }}' - check_implicit_admin: '{{ item.check_implicit_admin | default(omit) }}' - client_cert: '{{ item.client_cert | default(omit) }}' - client_key: '{{ item.client_key | default(omit) }}' - collation: '{{ item.collation | default(omit) }}' - config_file: '{{ item.config_file | default(omit) }}' - config_overrides_defaults: '{{ item.config_overrides_defaults | default(omit) }}' - connect_timeout: '{{ item.connect_timeout | default(omit) }}' - dump_extra_args: '{{ item.dump_extra_args | default(omit) }}' - encoding: '{{ item.encoding | default(omit) }}' - force: '{{ item.force | default(omit) }}' - hex_blob: '{{ item.hex_blob | default(omit) }}' - ignore_tables: '{{ item.ignore_tables | default(omit) }}' - login_host: '{{ item.login_host | default(omit) }}' - login_password: '{{ item.login_password | default(omit) }}' - login_port: '{{ item.login_port | default(omit) }}' - login_unix_socket: '{{ item.login_unix_socket | default(omit) }}' - login_user: '{{ item.login_user | default(omit) }}' - master_data: '{{ item.master_data | default(omit) }}' - name: '{{ item.name }}' - pipefail: '{{ item.pipefail | default(omit) }}' - quick: '{{ item.quick | default(omit) }}' - restrict_config_file: '{{ item.restrict_config_file | default(omit) }}' - single_transaction: '{{ item.single_transaction | default(omit) }}' - skip_lock_tables: '{{ item.skip_lock_tables | default(omit) }}' - sql_log_bin: '{{ item.sql_log_bin | default(omit) }}' - state: '{{ item.state }}' - target: '{{ item.target | default(omit) }}' - unsafe_login_password: '{{ item.unsafe_login_password | default(omit) }}' - use_shell: '{{ item.use_shell | default(omit) }}' - loop: '{{ mariadb_db_list }}' + ansible.mysql.mysql_db: + ca_cert: "{{ item.ca_cert | default(omit) }}" + chdir: "{{ item.chdir | default(omit) }}" + check_hostname: "{{ item.check_hostname | default(omit) }}" + client_cert: "{{ item.client_cert | default(omit) }}" + client_key: "{{ item.client_key | default(omit) }}" + collation: "{{ item.collation | default(omit) }}" + config_file: "{{ item.config_file | default(omit) }}" + config_overrides_defaults: "{{ item.config_overrides_defaults | default(omit) }}" + connect_timeout: "{{ item.connect_timeout | default(omit) }}" + dump_extra_args: "{{ item.dump_extra_args | default(omit) }}" + encoding: "{{ item.encoding | default(omit) }}" + force: "{{ item.force | default(omit) }}" + hex_blob: "{{ item.hex_blob | default(omit) }}" + ignore_tables: "{{ item.ignore_tables | default(omit) }}" + login_host: "{{ item.login_host | default(omit) }}" + login_password: "{{ item.login_password | default(omit) }}" + login_port: "{{ item.login_port | default(omit) }}" + login_unix_socket: "{{ item.login_unix_socket | default(omit) }}" + login_user: "{{ item.login_user | default(omit) }}" + master_data: "{{ item.master_data | default(omit) }}" + name: "{{ item.name }}" + pipefail: "{{ item.pipefail | default(omit) }}" + quick: "{{ item.quick | default(omit) }}" + restrict_config_file: "{{ item.restrict_config_file | default(omit) }}" + single_transaction: "{{ item.single_transaction | default(omit) }}" + skip_lock_tables: "{{ item.skip_lock_tables | default(omit) }}" + sql_log_bin: "{{ item.sql_log_bin | default(omit) }}" + state: "{{ item.state }}" + target: "{{ item.target | default(omit) }}" + unsafe_login_password: "{{ item.unsafe_login_password | default(omit) }}" + use_shell: "{{ item.use_shell | default(omit) }}" + loop: "{{ mariadb_db_list }}" loop_control: - label: '{{ item.name }} will be {{ item.state }}' -- name: 'ensure mariadb users' + label: "{{ item.name }} will be {{ item.state }}" +- name: "ensure mariadb users" when: - mariadb_user_list is defined - mariadb_user_list is iterable - community.mysql.mysql_user: - append_privs: '{{ item.append_privs | default(omit) }}' - attributes: '{{ item.attributes | default(omit) }}' - ca_cert: '{{ item.ca_cert | default(omit) }}' - check_hostname: '{{ item.check_hostname | default(omit) }}' - check_implicit_admin: '{{ item.check_implicit_admin | default(omit) }}' - client_cert: '{{ item.client_cert | default(omit) }}' - client_key: '{{ item.client_key | default(omit) }}' - column_case_sensitive: '{{ item.column_case_sensitive | default(omit) }}' - config_file: '{{ item.config_file | default(omit) }}' - connect_timeout: '{{ item.connect_timeout | default(omit) }}' - encrypted: '{{ item.encrypted | default(omit) }}' - force_context: '{{ item.force_context | default(omit) }}' - host: '{{ item.host | default(omit) }}' - host_all: '{{ item.host_all | default(omit) }}' - locked: '{{ item.locked | default(omit) }}' - login_host: '{{ item.login_host | default(omit) }}' - login_password: '{{ item.login_password | default(omit) }}' - login_port: '{{ item.login_port | default(omit) }}' - login_unix_socket: '{{ item.login_unix_socket | default(omit) }}' - login_user: '{{ item.login_user | default(omit) }}' - name: '{{ item.name }}' - password: '{{ item.password | default(omit) }}' - password_expire: '{{ item.password_expire | default(omit) }}' - password_expire_interval: '{{ item.password_expire_interval | default(omit) }}' - plugin: '{{ item.plugin | default(omit) }}' - plugin_auth_string: '{{ item.plugin_auth_string | default(omit) }}' - plugin_hash_string: '{{ item.plugin_hash_string | default(omit) }}' - priv: '{{ item.priv | default(omit) }}' - resource_limits: '{{ item.resource_limits | default(omit) }}' - salt: '{{ item.salt | default(omit) }}' - session_vars: '{{ item.session_vars | default(omit) }}' - sql_log_bin: '{{ item.sql_log_bin | default(omit) }}' - state: '{{ item.state }}' - subtract_privs: '{{ item.subtract_privs | default(omit) }}' - tls_requires: '{{ item.tls_requires | default(omit) }}' - update_password: '{{ item.update_password | default(omit) }}' - loop: '{{ mariadb_user_list }}' + ansible.mysql.mysql_user: + append_privs: "{{ item.append_privs | default(omit) }}" + attributes: "{{ item.attributes | default(omit) }}" + ca_cert: "{{ item.ca_cert | default(omit) }}" + check_hostname: "{{ item.check_hostname | default(omit) }}" + client_cert: "{{ item.client_cert | default(omit) }}" + client_key: "{{ item.client_key | default(omit) }}" + column_case_sensitive: "{{ item.column_case_sensitive | default(omit) }}" + config_file: "{{ item.config_file | default(omit) }}" + connect_timeout: "{{ item.connect_timeout | default(omit) }}" + encrypted: "{{ item.encrypted | default(omit) }}" + force_context: "{{ item.force_context | default(omit) }}" + host: "{{ item.host | default(omit) }}" + host_all: "{{ item.host_all | default(omit) }}" + locked: "{{ item.locked | default(omit) }}" + login_host: "{{ item.login_host | default(omit) }}" + login_password: "{{ item.login_password | default(omit) }}" + login_port: "{{ item.login_port | default(omit) }}" + login_unix_socket: "{{ item.login_unix_socket | default(omit) }}" + login_user: "{{ item.login_user | default(omit) }}" + name: "{{ item.name }}" + password: "{{ item.password | default(omit) }}" + password_expire: "{{ item.password_expire | default(omit) }}" + password_expire_interval: "{{ item.password_expire_interval | default(omit) }}" + plugin: "{{ item.plugin | default(omit) }}" + plugin_auth_string: "{{ item.plugin_auth_string | default(omit) }}" + plugin_hash_string: "{{ item.plugin_hash_string | default(omit) }}" + priv: "{{ item.priv | default(omit) }}" + resource_limits: "{{ item.resource_limits | default(omit) }}" + salt: "{{ item.salt | default(omit) }}" + session_vars: "{{ item.session_vars | default(omit) }}" + sql_log_bin: "{{ item.sql_log_bin | default(omit) }}" + state: "{{ item.state }}" + subtract_privs: "{{ item.subtract_privs | default(omit) }}" + tls_requires: "{{ item.tls_requires | default(omit) }}" + update_password: "{{ item.update_password | default(omit) }}" + loop: "{{ mariadb_user_list }}" loop_control: - label: '{{ item.name }} will be {{ item.state }}' + label: "{{ item.name }} will be {{ item.state }}" ... -