diff --git a/apps/accounts/automations/change_secret/database/mysql/main.yml b/apps/accounts/automations/change_secret/database/mysql/main.yml index 4cfb09380..b1d606668 100644 --- a/apps/accounts/automations/change_secret/database/mysql/main.yml +++ b/apps/accounts/automations/change_secret/database/mysql/main.yml @@ -39,7 +39,8 @@ name: "{{ account.username }}" password: "{{ account.secret }}" host: "%" - priv: "{{ account.username + '.*:USAGE' if db_name == '' else db_name + '.*:ALL' }}" + priv: "{{ omit if db_name == '' else db_name + '.*:ALL' }}" + append_privs: "{{ db_name != '' | bool }}" ignore_errors: true when: db_info is succeeded diff --git a/apps/accounts/automations/change_secret/database/postgresql/main.yml b/apps/accounts/automations/change_secret/database/postgresql/main.yml index bfa09217c..6346835d3 100644 --- a/apps/accounts/automations/change_secret/database/postgresql/main.yml +++ b/apps/accounts/automations/change_secret/database/postgresql/main.yml @@ -56,3 +56,5 @@ ssl_key: "{{ ssl_key if check_ssl and ssl_key | length > 0 else omit }}" ssl_mode: "{{ jms_asset.spec_info.pg_ssl_mode }}" when: check_conn_after_change + register: result + failed_when: not result.is_available diff --git a/apps/accounts/automations/push_account/database/mysql/main.yml b/apps/accounts/automations/push_account/database/mysql/main.yml index 54c7fcf41..00e9552bf 100644 --- a/apps/accounts/automations/push_account/database/mysql/main.yml +++ b/apps/accounts/automations/push_account/database/mysql/main.yml @@ -39,7 +39,8 @@ name: "{{ account.username }}" password: "{{ account.secret }}" host: "%" - priv: "{{ account.username + '.*:USAGE' if db_name == '' else db_name + '.*:ALL' }}" + priv: "{{ omit if db_name == '' else db_name + '.*:ALL' }}" + append_privs: "{{ db_name != '' | bool }}" ignore_errors: true when: db_info is succeeded