This commit is contained in:
Laurent Indermuehle 2023-01-05 11:59:08 +01:00
parent 7cffcf3355
commit 978676a6dc
No known key found for this signature in database
GPG key ID: 93FA944C9F34DD09
15 changed files with 75 additions and 59 deletions

View file

@ -1,3 +1,4 @@
---
# test code to assert no mysql user
# (c) 2014, Wayne Rosario <wrosario@ansible.com>
@ -22,4 +23,5 @@
register: result
- name: assert mysql user is not present
assert: { that: "'{{ user_name }}' not in result.stdout" }
assert:
that: "'{{ user_name }}' not in result.stdout"

View file

@ -1,3 +1,4 @@
---
# test code to assert mysql user
# (c) 2014, Wayne Rosario <wrosario@ansible.com>

View file

@ -1,3 +1,4 @@
---
- name: "applying user {{ username }}@{{ host }} with update_password={{ update_password }}"
mysql_user:
login_user: '{{ mysql_parameters.login_user }}'
@ -10,14 +11,17 @@
password: "{{ password }}"
update_password: "{{ update_password }}"
register: result
- name: assert a change occurred
assert:
that:
- "result.changed | bool == {{ expect_change }} | bool"
- "result.password_changed == {{ expect_password_change }}"
- name: query the user
command: "{{ mysql_command }} -BNe \"SELECT plugin, authentication_string FROM mysql.user where user='{{ username }}' and host='{{ host }}'\""
register: existing_user
- name: assert the password is as set to expect_hash
assert:
that:

View file

@ -1,3 +1,4 @@
---
# test code to create mysql user
# (c) 2014, Wayne Rosario <wrosario@ansible.com>
@ -18,16 +19,16 @@
- vars:
mysql_parameters: &mysql_params
login_user: '{{ mysql_user }}'
login_password: '{{ mysql_password }}'
login_host: '{{ gateway_addr }}'
login_port: '{{ mysql_primary_port }}'
login_user: "{{ mysql_user }}"
login_password: "{{ mysql_password }}"
login_host: "{{ gateway_addr }}"
login_port: "{{ mysql_primary_port }}"
block:
- name: Drop mysql user if exists
mysql_user:
<<: *mysql_params
name: '{{ user_name_1 }}'
name: "{{ user_name_1 }}"
state: absent
ignore_errors: yes
@ -35,8 +36,8 @@
- name: create mysql user {{user_name}}
mysql_user:
<<: *mysql_params
name: '{{ user_name }}'
password: '{{ user_password }}'
name: "{{ user_name }}"
password: "{{ user_password }}"
state: present
register: result

View file

@ -16,11 +16,11 @@
# Tests with force_context: yes
# Test user creation
- name: create mysql user {{user_name_1}}
- name: create mysql user {{ user_name_1 }}
mysql_user:
<<: *mysql_params
name: '{{ user_name_1 }}'
password: '{{ user_password_1 }}'
name: "{{ user_name_1 }}"
password: "{{ user_password_1 }}"
state: present
force_context: yes
register: result
@ -165,4 +165,4 @@
that:
- result is not changed
- include: assert_no_user.yml user_name={{user_name_1}}
- include: assert_no_user.yml user_name={{ user_name_1 }}

View file

@ -38,26 +38,26 @@
- include: issue-28.yml
- include: create_user.yml user_name={{user_name_1}} user_password={{ user_password_1 }}
- include: create_user.yml user_name={{ user_name_1 }} user_password={{ user_password_1 }}
- include: resource_limits.yml
- include: assert_user.yml user_name={{user_name_1}}
- include: assert_user.yml user_name={{ user_name_1 }}
- include: remove_user.yml user_name={{user_name_1}} user_password={{ user_password_1 }}
- include: remove_user.yml user_name={{ user_name_1 }} user_password={{ user_password_1 }}
- include: assert_no_user.yml user_name={{user_name_1}}
- include: assert_no_user.yml user_name={{ user_name_1 }}
# ============================================================
# Create mysql user that already exist on mysql database
#
- include: create_user.yml user_name={{user_name_1}} user_password={{ user_password_1 }}
- include: create_user.yml user_name={{ user_name_1 }} user_password={{ user_password_1 }}
- name: create mysql user that already exist (expect changed=false)
mysql_user:
<<: *mysql_params
name: '{{user_name_1}}'
password: '{{user_password_1}}'
name: "{{ user_name_1 }}"
password: "{{ user_password_1 }}"
state: present
register: result
@ -72,8 +72,8 @@
- name: remove mysql user state=absent (expect changed=true)
mysql_user:
<<: *mysql_params
name: '{{ user_name_1 }}'
password: '{{ user_password_1 }}'
name: "{{ user_name_1 }}"
password: "{{ user_password_1 }}"
state: absent
register: result
@ -82,7 +82,7 @@
that:
- result is changed
- include: assert_no_user.yml user_name={{user_name_1}}
- include: assert_no_user.yml user_name={{ user_name_1 }}
# ============================================================
# remove mysql user that does not exist on mysql database
@ -90,8 +90,8 @@
- name: remove mysql user that does not exist state=absent (expect changed=false)
mysql_user:
<<: *mysql_params
name: '{{ user_name_1 }}'
password: '{{ user_password_1 }}'
name: "{{ user_name_1 }}"
password: "{{ user_password_1 }}"
state: absent
register: result
@ -108,16 +108,16 @@
- name: create user with select privilege state=present (expect changed=true)
mysql_user:
<<: *mysql_params
name: '{{ user_name_1 }}'
password: '{{ user_password_1 }}'
name: "{{ user_name_1 }}"
password: "{{ user_password_1 }}"
state: present
register: result
- include: assert_user.yml user_name={{user_name_1}} priv=USAGE
- include: assert_user.yml user_name={{ user_name_1 }} priv=USAGE
- include: remove_user.yml user_name={{user_name_1}} user_password={{ user_password_1 }}
- include: remove_user.yml user_name={{ user_name_1 }} user_password={{ user_password_1 }}
- include: assert_no_user.yml user_name={{user_name_1}}
- include: assert_no_user.yml user_name={{ user_name_1 }}
# ============================================================
# Create user with select privileges and verify select privileges are assign
@ -125,17 +125,17 @@
- name: create user with select privilege state=present (expect changed=true)
mysql_user:
<<: *mysql_params
name: '{{ user_name_2 }}'
password: '{{ user_password_2 }}'
name: "{{ user_name_2 }}"
password: "{{ user_password_2 }}"
state: present
priv: '*.*:SELECT'
register: result
- include: assert_user.yml user_name={{user_name_2}} priv=SELECT
- include: remove_user.yml user_name={{user_name_2}} user_password={{ user_password_2 }}
- include: remove_user.yml user_name={{ user_name_2 }} user_password={{ user_password_2 }}
- include: assert_no_user.yml user_name={{user_name_2}}
- include: assert_no_user.yml user_name={{ user_name_2 }}
# ============================================================
# Assert user has access to multiple databases

View file

@ -1,3 +1,4 @@
---
# test code to remove mysql user
# (c) 2014, Wayne Rosario <wrosario@ansible.com>
@ -26,11 +27,11 @@
block:
# ============================================================
- name: remove mysql user {{user_name}}
- name: remove mysql user {{ user_name }}
mysql_user:
<<: *mysql_params
name: '{{user_name}}'
password: '{{user_password}}'
name: '{{ user_name }}'
password: '{{ user_password }}'
state: absent
register: result

View file

@ -1,3 +1,4 @@
---
# test code for resource_limits parameter
- vars:
mysql_parameters: &mysql_params

View file

@ -1,3 +1,4 @@
---
# Test code to ensure that appending privileges will not result in unnecessary changes when the current privileges
# are a superset of the new privileges that have been defined.
- vars:
@ -15,8 +16,8 @@
name: '{{ item }}'
state: present
loop:
- data1
- data2
- data1
- data2
- name: Create a user with an initial set of privileges
mysql_user:
@ -123,8 +124,8 @@
name: '{{ item }}'
state: present
loop:
- data1
- data2
- data1
- data2
- name: Drop test user
mysql_user:

View file

@ -14,9 +14,9 @@
name: '{{ item }}'
state: present
loop:
- data1
- data2
- data3
- data1
- data2
- data3
- name: Create user with privileges
mysql_user:
@ -54,7 +54,7 @@
- assert:
that:
- result is changed
- result is changed
- name: Grant select on the column again
mysql_user:
@ -66,7 +66,7 @@
- assert:
that:
- result is not changed
- result is not changed
- name: Grant select on columns
@ -79,7 +79,7 @@
- assert:
that:
- result is changed
- result is changed
- name: Grant select on columns again
mysql_user:
@ -91,7 +91,7 @@
- assert:
that:
- result is not changed
- result is not changed
- name: Grant privs on columns
mysql_user:
@ -103,7 +103,7 @@
- assert:
that:
- result is changed
- result is changed
- name: Grant same privs on columns again, note that the column order is different
mysql_user:
@ -115,7 +115,7 @@
- assert:
that:
- result is not changed
- result is not changed
- name: Run command to show privileges for user (expect privileges in stdout)
command: "{{ mysql_command }} -e \"SHOW GRANTS FOR '{{ user_name_3 }}'@'localhost'\""
@ -141,9 +141,9 @@
name: '{{ item }}'
state: present
loop:
- data1
- data2
- data3
- data1
- data2
- data3
- name: Drop test user
mysql_user:

View file

@ -1,3 +1,4 @@
---
# Test code to ensure that subtracting privileges will not result in unnecessary changes.
- vars:
mysql_parameters: &mysql_params
@ -14,7 +15,7 @@
name: '{{ item }}'
state: present
loop:
- data1
- data1
- name: Create a user with an initial set of privileges
mysql_user:
@ -164,7 +165,7 @@
name: '{{ item }}'
state: present
loop:
- data1
- data1
- name: Drop test user
mysql_user:

View file

@ -1,3 +1,4 @@
---
# test code for privileges for mysql_user module
# (c) 2014, Wayne Rosario <wrosario@ansible.com>

View file

@ -1,3 +1,4 @@
---
# Tests scenarios for both plaintext and encrypted user passwords.
- vars:

View file

@ -1,3 +1,4 @@
---
# https://github.com/ansible-collections/community.mysql/issues/231
- vars:
mysql_parameters: &mysql_params
@ -22,8 +23,8 @@
name: '{{ item }}'
state: present
loop:
- data1
- data2
- data1
- data2
- name: Create user with privileges
mysql_user:
@ -50,7 +51,7 @@
<<: *mysql_params
name: test231
members:
- '{{ user_name_3 }}@localhost'
- '{{ user_name_3 }}@localhost'
- name: Try to change privs
mysql_user:
@ -79,8 +80,8 @@
name: '{{ item }}'
state: present
loop:
- data1
- data2
- data1
- data2
- name: Drop test user
mysql_user:

View file

@ -1,3 +1,4 @@
---
# Tests scenarios for both plaintext and encrypted user passwords.
- vars: