Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

preparing for taskotron production setup

Browse source
This commit is contained in:
Tim Flink 2014-07-08 17:25:39 +00:00
parent a07d60886b
commit 405fdaa536
6 changed files with 44 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

15
roles/taskotron/resultsdb-backend/tasks/main.yml
View file

@ -12,26 +12,27 @@
sudo: true
action: postgresql_db db={{ resultsdb_db_name }}
- name: ensure production resultsdb user has access to prod database
when: deployment_type == 'prod'
- name: ensure dev resultsdb db user has access to dev database
when: deployment_type == 'dev'
delegate_to: "{{ resultsdb_db_host }}"
sudo_user: postgres
sudo: true
action: postgresql_user db={{ resultsdb_db_name }} user={{ prod_resultsdb_db_user }} password={{ prod_resultsdb_db_password }} role_attr_flags=NOSUPERUSER
action: postgresql_user db={{ resultsdb_db_name }} user={{ dev_resultsdb_db_user }} password={{ dev_resultsdb_db_password }} role_attr_flags=NOSUPERUSER
- name: ensure stg resultsdb user has access to stg database
- name: ensure stg resultsdb db user has access to stg database
when: deployment_type == 'stg'
delegate_to: "{{ resultsdb_db_host }}"
sudo_user: postgres
sudo: true
action: postgresql_user db={{ resultsdb_db_name }} user={{ stg_resultsdb_db_user }} password={{ stg_resultsdb_db_password }} role_attr_flags=NOSUPERUSER
- name: ensure resultsdb user has access to dev database
when: deployment_type == 'dev'
- name: ensure prod resultsdb db user has access to prod database
when: deployment_type == 'prod'
delegate_to: "{{ resultsdb_db_host }}"
sudo_user: postgres
sudo: true
action: postgresql_user db={{ resultsdb_db_name }} user={{ dev_resultsdb_db_user }} password={{ dev_resultsdb_db_password }} role_attr_flags=NOSUPERUSER
action: postgresql_user db={{ resultsdb_db_name }} user={{ prod_resultsdb_db_user }} password={{ prod_resultsdb_db_password }} role_attr_flags=NOSUPERUSER
- name: ensure selinux lets httpd talk to postgres
seboolean: name=httpd_can_network_connect_db persistent=yes state=yes