Force the generic python3 interpreter for python so we can safely handle in place OS upgrades on Fedora

ansible.cfg

@@ -7,7 +7,7 @@ fact_caching_connection = ./facts/
 inventory = ./inventory/
 forks = 5
 retry_files_enabled = False
-interpreter_python = auto
+interpreter_python = /usr/bin/python3
 callbacks_enabled = ansible.posix.profile_tasks,ansible.posix.profile_roles
 
 [ssh_connection]

collections/requirements.yml

@@ -12,7 +12,6 @@ collections:
   - name: 'community.grafana'
   - name: 'community.hashi_vault'
   - name: 'community.libvirt'
-  - name: 'community.mysql'
   - name: 'community.postgresql'
   - name: 'community.proxysql'
   - name: 'community.rabbitmq'

roles/ensure_mariadb/tasks/main.yml

@@ -1,11 +1,11 @@
 ---
 # tasks file for ensure_mariadb
-- name: 'include variables'
+- name: "include variables"
   when:
     - ansible_facts["system"] == 'Linux'
   ansible.builtin.include_vars:
     file: '{{ lookup("first_found", findme) }}'
-    name: 'ensure_mariadb'
+    name: "ensure_mariadb"
   vars:
     findme:
       files:
@@ -15,102 +15,102 @@
         - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
         - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
         - '{{ ansible_facts["os_family"] }}-default.yml'
-        - 'default.yml'
+        - "default.yml"
       paths:
-        - '../vars/'
+        - "../vars/"
-      errors: 'ignore'
+      errors: "ignore"
-- name: 'package discovery'
+- name: "package discovery"
   when:
     - ansible_facts["system"] == 'Linux'
     - ansible_facts["packages"] is not defined
   ansible.builtin.package_facts:
-- name: 'service discovery'
+- name: "service discovery"
   when:
     - ansible_facts["system"] == 'Linux'
     - ansible_facts["services"] is not defined
   ansible.builtin.service_facts:
-- name: 'ensure sysctl'
+- name: "ensure sysctl"
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_mariadb is defined
     - ensure_mariadb.sysctl_list is defined
     - ensure_mariadb.sysctl_list is iterable
   ansible.posix.sysctl:
-    name: '{{ item.name }}'
+    name: "{{ item.name }}"
-    reload: '{{ item.reload | default(omit) }}'
+    reload: "{{ item.reload | default(omit) }}"
-    state: '{{ item.state }}'
+    state: "{{ item.state }}"
-    sysctl_file: '{{ item.sysctl_file | default(omit) }}'
+    sysctl_file: "{{ item.sysctl_file | default(omit) }}"
-    sysctl_set: '{{ item.sysctl_set | default(omit) }}'
+    sysctl_set: "{{ item.sysctl_set | default(omit) }}"
-    value: '{{ item.value | default(omit) }}'
+    value: "{{ item.value | default(omit) }}"
-  loop: '{{ ensure_mariadb.sysctl_list }}'
+  loop: "{{ ensure_mariadb.sysctl_list }}"
   loop_control:
-    label: '{{ item.name }} will be {{ item.value }}'
+    label: "{{ item.name }} will be {{ item.value }}"
   notify:
-    - 'ensure_mariadb.package_facts'
+    - "ensure_mariadb.package_facts"
-    - 'ensure_mariadb.service_facts'
+    - "ensure_mariadb.service_facts"
-    - 'ensure_mariadb.service_reload'
+    - "ensure_mariadb.service_reload"
-    - 'ensure_mariadb.service_restart'
+    - "ensure_mariadb.service_restart"
-- name: 'ensure packages'
+- name: "ensure packages"
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_mariadb is defined
     - ensure_mariadb.package_list is defined
     - ensure_mariadb.package_list is iterable
   ansible.builtin.package:
-    name: '{{ item.name }}'
+    name: "{{ item.name }}"
-    state: '{{ item.state }}'
+    state: "{{ item.state }}"
-  loop: '{{ ensure_mariadb.package_list }}'
+  loop: "{{ ensure_mariadb.package_list }}"
   loop_control:
-    label: '{{ item.name }} will be {{ item.state }}'
+    label: "{{ item.name }} will be {{ item.state }}"
   notify:
-    - 'ensure_mariadb.package_facts'
+    - "ensure_mariadb.package_facts"
-    - 'ensure_mariadb.service_facts'
+    - "ensure_mariadb.service_facts"
-    - 'ensure_mariadb.service_reload'
+    - "ensure_mariadb.service_reload"
-    - 'ensure_mariadb.service_restart'
+    - "ensure_mariadb.service_restart"
-- name: 'ensure seboolean'
+- name: "ensure seboolean"
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_mariadb is defined
     - ensure_mariadb.seboolean_list is defined
     - ensure_mariadb.seboolean_list is iterable
   ansible.posix.seboolean:
-    name: '{{ item.name }}'
+    name: "{{ item.name }}"
-    persistent: '{{ item.persistent }}'
+    persistent: "{{ item.persistent }}"
-    state: '{{ item.state }}'
+    state: "{{ item.state }}"
-  loop: '{{ ensure_mariadb.seboolean_list }}'
+  loop: "{{ ensure_mariadb.seboolean_list }}"
   loop_control:
-    label: '{{ item.name }} will be {{ item.state }}'
+    label: "{{ item.name }} will be {{ item.state }}"
   notify:
-    - 'ensure_mariadb.package_facts'
+    - "ensure_mariadb.package_facts"
-    - 'ensure_mariadb.service_facts'
+    - "ensure_mariadb.service_facts"
-    - 'ensure_mariadb.service_reload'
+    - "ensure_mariadb.service_reload"
-    - 'ensure_mariadb.service_restart'
+    - "ensure_mariadb.service_restart"
-- name: 'ensure configurations'
+- name: "ensure configurations"
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_mariadb is defined
     - ensure_mariadb.template_list is defined
     - ensure_mariadb.template_list is iterable
   ansible.builtin.template:
-    backup: 'no'
+    backup: "no"
-    dest: '{{ item.dest }}'
+    dest: "{{ item.dest }}"
-    group: '{{ item.group | default(omit) }}'
+    group: "{{ item.group | default(omit) }}"
-    mode: '{{ item.mode | default(omit) }}'
+    mode: "{{ item.mode | default(omit) }}"
-    owner: '{{ item.owner | default(omit) }}'
+    owner: "{{ item.owner | default(omit) }}"
-    selevel: '{{ iteml.selevel | default(omit) }}'
+    selevel: "{{ iteml.selevel | default(omit) }}"
-    serole: '{{ item.serole | default(omit) }}'
+    serole: "{{ item.serole | default(omit) }}"
-    setype: '{{ item.setype | default(omit) }}'
+    setype: "{{ item.setype | default(omit) }}"
-    seuser: '{{ item.seuser | default(omit) }}'
+    seuser: "{{ item.seuser | default(omit) }}"
-    src: '{{ item.src }}'
+    src: "{{ item.src }}"
-  loop: '{{ ensure_mariadb.template_list }}'
+  loop: "{{ ensure_mariadb.template_list }}"
   loop_control:
-    label: '{{ item.dest }} will be ensured'
+    label: "{{ item.dest }} will be ensured"
   notify:
-    - 'ensure_mariadb.package_facts'
+    - "ensure_mariadb.package_facts"
-    - 'ensure_mariadb.service_facts'
+    - "ensure_mariadb.service_facts"
-    - 'ensure_mariadb.service_reload'
+    - "ensure_mariadb.service_reload"
-    - 'ensure_mariadb.service_restart'
+    - "ensure_mariadb.service_restart"
-- name: 'ensure firewall'
+- name: "ensure firewall"
   when:
     - ansible_facts["system"] == 'Linux'
     - ansible_facts.packages["firewalld"] is defined
@@ -119,120 +119,117 @@
     - ensure_mariadb.firewall_list is defined
     - ensure_mariadb.firewall_list is iterable
   ansible.posix.firewalld:
-    permanent: '{{ item.permanent }}'
+    permanent: "{{ item.permanent }}"
-    service: '{{ item.service }}'
+    service: "{{ item.service }}"
-    state: '{{ item.state }}'
+    state: "{{ item.state }}"
-  loop: '{{ ensure_mariadb.firewall_list }}'
+  loop: "{{ ensure_mariadb.firewall_list }}"
   loop_control:
-    label: '{{ item.service }} will be {{ item.state }}'
+    label: "{{ item.service }} will be {{ item.state }}"
   notify:
-    - 'ensure_mariadb.package_facts'
+    - "ensure_mariadb.package_facts"
-    - 'ensure_mariadb.service_facts'
+    - "ensure_mariadb.service_facts"
-    - 'ensure_mariadb.service_reload'
+    - "ensure_mariadb.service_reload"
-    - 'ensure_mariadb.service_restart'
+    - "ensure_mariadb.service_restart"
-- name: 'ensure services'
+- name: "ensure services"
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_mariadb is defined
     - ensure_mariadb.service_list is defined
     - ensure_mariadb.service_list is iterable
   ansible.builtin.service:
-    enabled: '{{ item.enabled }}'
+    enabled: "{{ item.enabled }}"
-    name: '{{ item.name }}'
+    name: "{{ item.name }}"
-    state: '{{ item.state }}'
+    state: "{{ item.state }}"
-  loop: '{{ ensure_mariadb.service_list }}'
+  loop: "{{ ensure_mariadb.service_list }}"
   loop_control:
-    label: '{{ item.name }} will be {{ item.state }}'
+    label: "{{ item.name }} will be {{ item.state }}"
   notify:
-    - 'ensure_mariadb.package_facts'
+    - "ensure_mariadb.package_facts"
-    - 'ensure_mariadb.service_facts'
+    - "ensure_mariadb.service_facts"
-    - 'ensure_mariadb.service_reload'
+    - "ensure_mariadb.service_reload"
-    - 'ensure_mariadb.service_restart'
+    - "ensure_mariadb.service_restart"
-- name: 'flush handlers'
+- name: "flush handlers"
-  ansible.builtin.meta: 'flush_handlers'
+  ansible.builtin.meta: "flush_handlers"
-- name: 'ensure mariadb databases'
+- name: "ensure mariadb databases"
   when:
     - mariadb_db_list is defined
     - mariadb_db_list is iterable
-  community.mysql.mysql_db:
+  ansible.mysql.mysql_db:
-    ca_cert: '{{ item.ca_cert | default(omit) }}'
+    ca_cert: "{{ item.ca_cert | default(omit) }}"
-    chdir: '{{ item.chdir | default(omit) }}'
+    chdir: "{{ item.chdir | default(omit) }}"
-    check_hostname: '{{ item.check_hostname | default(omit) }}'
+    check_hostname: "{{ item.check_hostname | default(omit) }}"
-    check_implicit_admin: '{{ item.check_implicit_admin | default(omit) }}'
+    client_cert: "{{ item.client_cert | default(omit) }}"
-    client_cert: '{{ item.client_cert | default(omit) }}'
+    client_key: "{{ item.client_key | default(omit) }}"
-    client_key: '{{ item.client_key | default(omit) }}'
+    collation: "{{ item.collation | default(omit) }}"
-    collation: '{{ item.collation | default(omit) }}'
+    config_file: "{{ item.config_file | default(omit) }}"
-    config_file: '{{ item.config_file | default(omit) }}'
+    config_overrides_defaults: "{{ item.config_overrides_defaults | default(omit) }}"
-    config_overrides_defaults: '{{ item.config_overrides_defaults | default(omit) }}'
+    connect_timeout: "{{ item.connect_timeout | default(omit) }}"
-    connect_timeout: '{{ item.connect_timeout | default(omit) }}'
+    dump_extra_args: "{{ item.dump_extra_args | default(omit) }}"
-    dump_extra_args: '{{ item.dump_extra_args | default(omit) }}'
+    encoding: "{{ item.encoding | default(omit) }}"
-    encoding: '{{ item.encoding | default(omit) }}'
+    force: "{{ item.force | default(omit) }}"
-    force: '{{ item.force | default(omit) }}'
+    hex_blob: "{{ item.hex_blob | default(omit) }}"
-    hex_blob: '{{ item.hex_blob | default(omit) }}'
+    ignore_tables: "{{ item.ignore_tables | default(omit) }}"
-    ignore_tables: '{{ item.ignore_tables | default(omit) }}'
+    login_host: "{{ item.login_host | default(omit) }}"
-    login_host: '{{ item.login_host | default(omit) }}'
+    login_password: "{{ item.login_password | default(omit) }}"
-    login_password: '{{ item.login_password | default(omit) }}'
+    login_port: "{{ item.login_port | default(omit) }}"
-    login_port: '{{ item.login_port | default(omit) }}'
+    login_unix_socket: "{{ item.login_unix_socket | default(omit) }}"
-    login_unix_socket: '{{ item.login_unix_socket | default(omit) }}'
+    login_user: "{{ item.login_user | default(omit) }}"
-    login_user: '{{ item.login_user | default(omit) }}'
+    master_data: "{{ item.master_data | default(omit) }}"
-    master_data: '{{ item.master_data | default(omit) }}'
+    name: "{{ item.name }}"
-    name: '{{ item.name }}'
+    pipefail: "{{ item.pipefail | default(omit) }}"
-    pipefail: '{{ item.pipefail | default(omit) }}'
+    quick: "{{ item.quick | default(omit) }}"
-    quick: '{{ item.quick | default(omit) }}'
+    restrict_config_file: "{{ item.restrict_config_file | default(omit) }}"
-    restrict_config_file: '{{ item.restrict_config_file | default(omit) }}'
+    single_transaction: "{{ item.single_transaction | default(omit) }}"
-    single_transaction: '{{ item.single_transaction | default(omit) }}'
+    skip_lock_tables: "{{ item.skip_lock_tables | default(omit) }}"
-    skip_lock_tables: '{{ item.skip_lock_tables | default(omit) }}'
+    sql_log_bin: "{{ item.sql_log_bin | default(omit) }}"
-    sql_log_bin: '{{ item.sql_log_bin | default(omit) }}'
+    state: "{{ item.state }}"
-    state: '{{ item.state }}'
+    target: "{{ item.target | default(omit) }}"
-    target: '{{ item.target | default(omit) }}'
+    unsafe_login_password: "{{ item.unsafe_login_password | default(omit) }}"
-    unsafe_login_password: '{{ item.unsafe_login_password | default(omit) }}'
+    use_shell: "{{ item.use_shell | default(omit) }}"
-    use_shell: '{{ item.use_shell | default(omit) }}'
+  loop: "{{ mariadb_db_list }}"
-  loop: '{{ mariadb_db_list }}'
   loop_control:
-    label: '{{ item.name }} will be {{ item.state }}'
+    label: "{{ item.name }} will be {{ item.state }}"
-- name: 'ensure mariadb users'
+- name: "ensure mariadb users"
   when:
     - mariadb_user_list is defined
     - mariadb_user_list is iterable
-  community.mysql.mysql_user:
+  ansible.mysql.mysql_user:
-    append_privs: '{{ item.append_privs | default(omit) }}'
+    append_privs: "{{ item.append_privs | default(omit) }}"
-    attributes: '{{ item.attributes | default(omit) }}'
+    attributes: "{{ item.attributes | default(omit) }}"
-    ca_cert: '{{ item.ca_cert | default(omit) }}'
+    ca_cert: "{{ item.ca_cert | default(omit) }}"
-    check_hostname: '{{ item.check_hostname | default(omit) }}'
+    check_hostname: "{{ item.check_hostname | default(omit) }}"
-    check_implicit_admin: '{{ item.check_implicit_admin | default(omit) }}'
+    client_cert: "{{ item.client_cert | default(omit) }}"
-    client_cert: '{{ item.client_cert | default(omit) }}'
+    client_key: "{{ item.client_key | default(omit) }}"
-    client_key: '{{ item.client_key | default(omit) }}'
+    column_case_sensitive: "{{ item.column_case_sensitive | default(omit) }}"
-    column_case_sensitive: '{{ item.column_case_sensitive | default(omit) }}'
+    config_file: "{{ item.config_file | default(omit) }}"
-    config_file: '{{ item.config_file | default(omit) }}'
+    connect_timeout: "{{ item.connect_timeout | default(omit) }}"
-    connect_timeout: '{{ item.connect_timeout | default(omit) }}'
+    encrypted: "{{ item.encrypted | default(omit) }}"
-    encrypted: '{{ item.encrypted | default(omit) }}'
+    force_context: "{{ item.force_context | default(omit) }}"
-    force_context: '{{ item.force_context | default(omit) }}'
+    host: "{{ item.host | default(omit) }}"
-    host: '{{ item.host | default(omit) }}'
+    host_all: "{{ item.host_all | default(omit) }}"
-    host_all: '{{ item.host_all | default(omit) }}'
+    locked: "{{ item.locked | default(omit) }}"
-    locked: '{{ item.locked | default(omit) }}'
+    login_host: "{{ item.login_host | default(omit) }}"
-    login_host: '{{ item.login_host | default(omit) }}'
+    login_password: "{{ item.login_password | default(omit) }}"
-    login_password: '{{ item.login_password | default(omit) }}'
+    login_port: "{{ item.login_port | default(omit) }}"
-    login_port: '{{ item.login_port | default(omit) }}'
+    login_unix_socket: "{{ item.login_unix_socket | default(omit) }}"
-    login_unix_socket: '{{ item.login_unix_socket | default(omit) }}'
+    login_user: "{{ item.login_user | default(omit) }}"
-    login_user: '{{ item.login_user | default(omit) }}'
+    name: "{{ item.name }}"
-    name: '{{ item.name }}'
+    password: "{{ item.password | default(omit) }}"
-    password: '{{ item.password | default(omit) }}'
+    password_expire: "{{ item.password_expire | default(omit) }}"
-    password_expire: '{{ item.password_expire | default(omit) }}'
+    password_expire_interval: "{{ item.password_expire_interval | default(omit) }}"
-    password_expire_interval: '{{ item.password_expire_interval | default(omit) }}'
+    plugin: "{{ item.plugin | default(omit) }}"
-    plugin: '{{ item.plugin | default(omit) }}'
+    plugin_auth_string: "{{ item.plugin_auth_string | default(omit) }}"
-    plugin_auth_string: '{{ item.plugin_auth_string | default(omit) }}'
+    plugin_hash_string: "{{ item.plugin_hash_string | default(omit) }}"
-    plugin_hash_string: '{{ item.plugin_hash_string | default(omit) }}'
+    priv: "{{ item.priv | default(omit) }}"
-    priv: '{{ item.priv | default(omit) }}'
+    resource_limits: "{{ item.resource_limits | default(omit) }}"
-    resource_limits: '{{ item.resource_limits | default(omit) }}'
+    salt: "{{ item.salt | default(omit) }}"
-    salt: '{{ item.salt | default(omit) }}'
+    session_vars: "{{ item.session_vars | default(omit) }}"
-    session_vars: '{{ item.session_vars | default(omit) }}'
+    sql_log_bin: "{{ item.sql_log_bin | default(omit) }}"
-    sql_log_bin: '{{ item.sql_log_bin | default(omit) }}'
+    state: "{{ item.state }}"
-    state: '{{ item.state }}'
+    subtract_privs: "{{ item.subtract_privs | default(omit) }}"
-    subtract_privs: '{{ item.subtract_privs | default(omit) }}'
+    tls_requires: "{{ item.tls_requires | default(omit) }}"
-    tls_requires: '{{ item.tls_requires | default(omit) }}'
+    update_password: "{{ item.update_password | default(omit) }}"
-    update_password: '{{ item.update_password | default(omit) }}'
+  loop: "{{ mariadb_user_list }}"
-  loop: '{{ mariadb_user_list }}'
   loop_control:
-    label: '{{ item.name }} will be {{ item.state }}'
+    label: "{{ item.name }} will be {{ item.state }}"
 ...
-