diff --git a/apps/accounts/automations/change_secret/database/mysql/main.yml b/apps/accounts/automations/change_secret/database/mysql/main.yml index f36eff171..3edc8775d 100644 --- a/apps/accounts/automations/change_secret/database/mysql/main.yml +++ b/apps/accounts/automations/change_secret/database/mysql/main.yml @@ -36,7 +36,8 @@ name: "{{ account.username }}" password: "{{ account.secret }}" host: "%" - priv: "{{ account.username + '.*:USAGE' if db_name == '' else db_name + '.*:ALL' }}" + priv: "{{ omit if db_name == '' else db_name + '.*:ALL' }}" + append_privs: "{{ db_name != '' | bool }}" ignore_errors: true when: db_info is succeeded diff --git a/apps/accounts/automations/change_secret/database/postgresql/main.yml b/apps/accounts/automations/change_secret/database/postgresql/main.yml index 9d55a898e..a142d69e2 100644 --- a/apps/accounts/automations/change_secret/database/postgresql/main.yml +++ b/apps/accounts/automations/change_secret/database/postgresql/main.yml @@ -39,3 +39,5 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" db: "{{ jms_asset.spec_info.db_name }}" + register: result + failed_when: not result.is_available \ No newline at end of file diff --git a/apps/accounts/automations/push_account/database/mysql/main.yml b/apps/accounts/automations/push_account/database/mysql/main.yml index f36eff171..3edc8775d 100644 --- a/apps/accounts/automations/push_account/database/mysql/main.yml +++ b/apps/accounts/automations/push_account/database/mysql/main.yml @@ -36,7 +36,8 @@ name: "{{ account.username }}" password: "{{ account.secret }}" host: "%" - priv: "{{ account.username + '.*:USAGE' if db_name == '' else db_name + '.*:ALL' }}" + priv: "{{ omit if db_name == '' else db_name + '.*:ALL' }}" + append_privs: "{{ db_name != '' | bool }}" ignore_errors: true when: db_info is succeeded diff --git a/apps/accounts/automations/push_account/database/postgresql/main.yml b/apps/accounts/automations/push_account/database/postgresql/main.yml index 265401fbd..f57438e3e 100644 --- a/apps/accounts/automations/push_account/database/postgresql/main.yml +++ b/apps/accounts/automations/push_account/database/postgresql/main.yml @@ -31,7 +31,6 @@ role_attr_flags: LOGIN ignore_errors: true when: result is succeeded - register: change_info - name: Verify password community.postgresql.postgresql_ping: @@ -40,8 +39,5 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" db: "{{ jms_asset.spec_info.db_name }}" - when: - - result is succeeded - - change_info is succeeded register: result failed_when: not result.is_available