35 lines
1008 B
YAML
35 lines
1008 B
YAML
---
|
|
- name: Bonus - créer un utilisateur non sudo capable d'appeler MySQL
|
|
hosts: debian
|
|
become: yes
|
|
tasks:
|
|
- name: Créer l'utilisateur non sudo mysqlcaller
|
|
ansible.builtin.user:
|
|
name: mysqlcaller
|
|
shell: /bin/bash
|
|
create_home: yes
|
|
state: present
|
|
|
|
- name: Créer un fichier .my.cnf pour mysqlcaller
|
|
ansible.builtin.copy:
|
|
dest: /home/mysqlcaller/.my.cnf
|
|
owner: mysqlcaller
|
|
group: mysqlcaller
|
|
mode: '0600'
|
|
content: |
|
|
[client]
|
|
host={{ mysql_host }}
|
|
port={{ mysql_port }}
|
|
user=root
|
|
password={{ mysql_root_password }}
|
|
database={{ mysql_database }}
|
|
|
|
- name: Tester MySQL avec l'utilisateur non sudo
|
|
ansible.builtin.command: sudo -u mysqlcaller mysql -e "SHOW TABLES;"
|
|
register: mysqlcaller_test
|
|
changed_when: false
|
|
|
|
- name: Afficher le test du user non sudo
|
|
ansible.builtin.debug:
|
|
var: mysqlcaller_test.stdout_lines
|