This commit is contained in:
Laurent Indermuehle 2023-01-05 11:59:08 +01:00
parent 7cffcf3355
commit 978676a6dc
No known key found for this signature in database
GPG key ID: 93FA944C9F34DD09
15 changed files with 75 additions and 59 deletions

View file

@ -1,3 +1,4 @@
---
# test code to assert no mysql user # test code to assert no mysql user
# (c) 2014, Wayne Rosario <wrosario@ansible.com> # (c) 2014, Wayne Rosario <wrosario@ansible.com>
@ -22,4 +23,5 @@
register: result register: result
- name: assert mysql user is not present - name: assert mysql user is not present
assert: { that: "'{{ user_name }}' not in result.stdout" } assert:
that: "'{{ user_name }}' not in result.stdout"

View file

@ -1,3 +1,4 @@
---
# test code to assert mysql user # test code to assert mysql user
# (c) 2014, Wayne Rosario <wrosario@ansible.com> # (c) 2014, Wayne Rosario <wrosario@ansible.com>

View file

@ -1,3 +1,4 @@
---
- name: "applying user {{ username }}@{{ host }} with update_password={{ update_password }}" - name: "applying user {{ username }}@{{ host }} with update_password={{ update_password }}"
mysql_user: mysql_user:
login_user: '{{ mysql_parameters.login_user }}' login_user: '{{ mysql_parameters.login_user }}'
@ -10,14 +11,17 @@
password: "{{ password }}" password: "{{ password }}"
update_password: "{{ update_password }}" update_password: "{{ update_password }}"
register: result register: result
- name: assert a change occurred - name: assert a change occurred
assert: assert:
that: that:
- "result.changed | bool == {{ expect_change }} | bool" - "result.changed | bool == {{ expect_change }} | bool"
- "result.password_changed == {{ expect_password_change }}" - "result.password_changed == {{ expect_password_change }}"
- name: query the user - name: query the user
command: "{{ mysql_command }} -BNe \"SELECT plugin, authentication_string FROM mysql.user where user='{{ username }}' and host='{{ host }}'\"" command: "{{ mysql_command }} -BNe \"SELECT plugin, authentication_string FROM mysql.user where user='{{ username }}' and host='{{ host }}'\""
register: existing_user register: existing_user
- name: assert the password is as set to expect_hash - name: assert the password is as set to expect_hash
assert: assert:
that: that:

View file

@ -1,3 +1,4 @@
---
# test code to create mysql user # test code to create mysql user
# (c) 2014, Wayne Rosario <wrosario@ansible.com> # (c) 2014, Wayne Rosario <wrosario@ansible.com>
@ -18,16 +19,16 @@
- vars: - vars:
mysql_parameters: &mysql_params mysql_parameters: &mysql_params
login_user: '{{ mysql_user }}' login_user: "{{ mysql_user }}"
login_password: '{{ mysql_password }}' login_password: "{{ mysql_password }}"
login_host: '{{ gateway_addr }}' login_host: "{{ gateway_addr }}"
login_port: '{{ mysql_primary_port }}' login_port: "{{ mysql_primary_port }}"
block: block:
- name: Drop mysql user if exists - name: Drop mysql user if exists
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{ user_name_1 }}' name: "{{ user_name_1 }}"
state: absent state: absent
ignore_errors: yes ignore_errors: yes
@ -35,8 +36,8 @@
- name: create mysql user {{user_name}} - name: create mysql user {{user_name}}
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{ user_name }}' name: "{{ user_name }}"
password: '{{ user_password }}' password: "{{ user_password }}"
state: present state: present
register: result register: result

View file

@ -16,11 +16,11 @@
# Tests with force_context: yes # Tests with force_context: yes
# Test user creation # Test user creation
- name: create mysql user {{user_name_1}} - name: create mysql user {{ user_name_1 }}
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{ user_name_1 }}' name: "{{ user_name_1 }}"
password: '{{ user_password_1 }}' password: "{{ user_password_1 }}"
state: present state: present
force_context: yes force_context: yes
register: result register: result
@ -165,4 +165,4 @@
that: that:
- result is not changed - result is not changed
- include: assert_no_user.yml user_name={{user_name_1}} - include: assert_no_user.yml user_name={{ user_name_1 }}

View file

@ -38,26 +38,26 @@
- include: issue-28.yml - include: issue-28.yml
- include: create_user.yml user_name={{user_name_1}} user_password={{ user_password_1 }} - include: create_user.yml user_name={{ user_name_1 }} user_password={{ user_password_1 }}
- include: resource_limits.yml - include: resource_limits.yml
- include: assert_user.yml user_name={{user_name_1}} - include: assert_user.yml user_name={{ user_name_1 }}
- include: remove_user.yml user_name={{user_name_1}} user_password={{ user_password_1 }} - include: remove_user.yml user_name={{ user_name_1 }} user_password={{ user_password_1 }}
- include: assert_no_user.yml user_name={{user_name_1}} - include: assert_no_user.yml user_name={{ user_name_1 }}
# ============================================================ # ============================================================
# Create mysql user that already exist on mysql database # Create mysql user that already exist on mysql database
# #
- include: create_user.yml user_name={{user_name_1}} user_password={{ user_password_1 }} - include: create_user.yml user_name={{ user_name_1 }} user_password={{ user_password_1 }}
- name: create mysql user that already exist (expect changed=false) - name: create mysql user that already exist (expect changed=false)
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{user_name_1}}' name: "{{ user_name_1 }}"
password: '{{user_password_1}}' password: "{{ user_password_1 }}"
state: present state: present
register: result register: result
@ -72,8 +72,8 @@
- name: remove mysql user state=absent (expect changed=true) - name: remove mysql user state=absent (expect changed=true)
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{ user_name_1 }}' name: "{{ user_name_1 }}"
password: '{{ user_password_1 }}' password: "{{ user_password_1 }}"
state: absent state: absent
register: result register: result
@ -82,7 +82,7 @@
that: that:
- result is changed - result is changed
- include: assert_no_user.yml user_name={{user_name_1}} - include: assert_no_user.yml user_name={{ user_name_1 }}
# ============================================================ # ============================================================
# remove mysql user that does not exist on mysql database # remove mysql user that does not exist on mysql database
@ -90,8 +90,8 @@
- name: remove mysql user that does not exist state=absent (expect changed=false) - name: remove mysql user that does not exist state=absent (expect changed=false)
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{ user_name_1 }}' name: "{{ user_name_1 }}"
password: '{{ user_password_1 }}' password: "{{ user_password_1 }}"
state: absent state: absent
register: result register: result
@ -108,16 +108,16 @@
- name: create user with select privilege state=present (expect changed=true) - name: create user with select privilege state=present (expect changed=true)
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{ user_name_1 }}' name: "{{ user_name_1 }}"
password: '{{ user_password_1 }}' password: "{{ user_password_1 }}"
state: present state: present
register: result register: result
- include: assert_user.yml user_name={{user_name_1}} priv=USAGE - include: assert_user.yml user_name={{ user_name_1 }} priv=USAGE
- include: remove_user.yml user_name={{user_name_1}} user_password={{ user_password_1 }} - include: remove_user.yml user_name={{ user_name_1 }} user_password={{ user_password_1 }}
- include: assert_no_user.yml user_name={{user_name_1}} - include: assert_no_user.yml user_name={{ user_name_1 }}
# ============================================================ # ============================================================
# Create user with select privileges and verify select privileges are assign # Create user with select privileges and verify select privileges are assign
@ -125,17 +125,17 @@
- name: create user with select privilege state=present (expect changed=true) - name: create user with select privilege state=present (expect changed=true)
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{ user_name_2 }}' name: "{{ user_name_2 }}"
password: '{{ user_password_2 }}' password: "{{ user_password_2 }}"
state: present state: present
priv: '*.*:SELECT' priv: '*.*:SELECT'
register: result register: result
- include: assert_user.yml user_name={{user_name_2}} priv=SELECT - include: assert_user.yml user_name={{user_name_2}} priv=SELECT
- include: remove_user.yml user_name={{user_name_2}} user_password={{ user_password_2 }} - include: remove_user.yml user_name={{ user_name_2 }} user_password={{ user_password_2 }}
- include: assert_no_user.yml user_name={{user_name_2}} - include: assert_no_user.yml user_name={{ user_name_2 }}
# ============================================================ # ============================================================
# Assert user has access to multiple databases # Assert user has access to multiple databases

View file

@ -1,3 +1,4 @@
---
# test code to remove mysql user # test code to remove mysql user
# (c) 2014, Wayne Rosario <wrosario@ansible.com> # (c) 2014, Wayne Rosario <wrosario@ansible.com>
@ -26,11 +27,11 @@
block: block:
# ============================================================ # ============================================================
- name: remove mysql user {{user_name}} - name: remove mysql user {{ user_name }}
mysql_user: mysql_user:
<<: *mysql_params <<: *mysql_params
name: '{{user_name}}' name: '{{ user_name }}'
password: '{{user_password}}' password: '{{ user_password }}'
state: absent state: absent
register: result register: result

View file

@ -1,3 +1,4 @@
---
# test code for resource_limits parameter # test code for resource_limits parameter
- vars: - vars:
mysql_parameters: &mysql_params mysql_parameters: &mysql_params

View file

@ -1,3 +1,4 @@
---
# Test code to ensure that appending privileges will not result in unnecessary changes when the current privileges # Test code to ensure that appending privileges will not result in unnecessary changes when the current privileges
# are a superset of the new privileges that have been defined. # are a superset of the new privileges that have been defined.
- vars: - vars:
@ -15,8 +16,8 @@
name: '{{ item }}' name: '{{ item }}'
state: present state: present
loop: loop:
- data1 - data1
- data2 - data2
- name: Create a user with an initial set of privileges - name: Create a user with an initial set of privileges
mysql_user: mysql_user:
@ -123,8 +124,8 @@
name: '{{ item }}' name: '{{ item }}'
state: present state: present
loop: loop:
- data1 - data1
- data2 - data2
- name: Drop test user - name: Drop test user
mysql_user: mysql_user:

View file

@ -14,9 +14,9 @@
name: '{{ item }}' name: '{{ item }}'
state: present state: present
loop: loop:
- data1 - data1
- data2 - data2
- data3 - data3
- name: Create user with privileges - name: Create user with privileges
mysql_user: mysql_user:
@ -54,7 +54,7 @@
- assert: - assert:
that: that:
- result is changed - result is changed
- name: Grant select on the column again - name: Grant select on the column again
mysql_user: mysql_user:
@ -66,7 +66,7 @@
- assert: - assert:
that: that:
- result is not changed - result is not changed
- name: Grant select on columns - name: Grant select on columns
@ -79,7 +79,7 @@
- assert: - assert:
that: that:
- result is changed - result is changed
- name: Grant select on columns again - name: Grant select on columns again
mysql_user: mysql_user:
@ -91,7 +91,7 @@
- assert: - assert:
that: that:
- result is not changed - result is not changed
- name: Grant privs on columns - name: Grant privs on columns
mysql_user: mysql_user:
@ -103,7 +103,7 @@
- assert: - assert:
that: that:
- result is changed - result is changed
- name: Grant same privs on columns again, note that the column order is different - name: Grant same privs on columns again, note that the column order is different
mysql_user: mysql_user:
@ -115,7 +115,7 @@
- assert: - assert:
that: that:
- result is not changed - result is not changed
- name: Run command to show privileges for user (expect privileges in stdout) - name: Run command to show privileges for user (expect privileges in stdout)
command: "{{ mysql_command }} -e \"SHOW GRANTS FOR '{{ user_name_3 }}'@'localhost'\"" command: "{{ mysql_command }} -e \"SHOW GRANTS FOR '{{ user_name_3 }}'@'localhost'\""
@ -141,9 +141,9 @@
name: '{{ item }}' name: '{{ item }}'
state: present state: present
loop: loop:
- data1 - data1
- data2 - data2
- data3 - data3
- name: Drop test user - name: Drop test user
mysql_user: mysql_user:

View file

@ -1,3 +1,4 @@
---
# Test code to ensure that subtracting privileges will not result in unnecessary changes. # Test code to ensure that subtracting privileges will not result in unnecessary changes.
- vars: - vars:
mysql_parameters: &mysql_params mysql_parameters: &mysql_params
@ -14,7 +15,7 @@
name: '{{ item }}' name: '{{ item }}'
state: present state: present
loop: loop:
- data1 - data1
- name: Create a user with an initial set of privileges - name: Create a user with an initial set of privileges
mysql_user: mysql_user:
@ -164,7 +165,7 @@
name: '{{ item }}' name: '{{ item }}'
state: present state: present
loop: loop:
- data1 - data1
- name: Drop test user - name: Drop test user
mysql_user: mysql_user:

View file

@ -1,3 +1,4 @@
---
# test code for privileges for mysql_user module # test code for privileges for mysql_user module
# (c) 2014, Wayne Rosario <wrosario@ansible.com> # (c) 2014, Wayne Rosario <wrosario@ansible.com>

View file

@ -1,3 +1,4 @@
---
# Tests scenarios for both plaintext and encrypted user passwords. # Tests scenarios for both plaintext and encrypted user passwords.
- vars: - vars:

View file

@ -1,3 +1,4 @@
---
# https://github.com/ansible-collections/community.mysql/issues/231 # https://github.com/ansible-collections/community.mysql/issues/231
- vars: - vars:
mysql_parameters: &mysql_params mysql_parameters: &mysql_params
@ -22,8 +23,8 @@
name: '{{ item }}' name: '{{ item }}'
state: present state: present
loop: loop:
- data1 - data1
- data2 - data2
- name: Create user with privileges - name: Create user with privileges
mysql_user: mysql_user:
@ -50,7 +51,7 @@
<<: *mysql_params <<: *mysql_params
name: test231 name: test231
members: members:
- '{{ user_name_3 }}@localhost' - '{{ user_name_3 }}@localhost'
- name: Try to change privs - name: Try to change privs
mysql_user: mysql_user:
@ -79,8 +80,8 @@
name: '{{ item }}' name: '{{ item }}'
state: present state: present
loop: loop:
- data1 - data1
- data2 - data2
- name: Drop test user - name: Drop test user
mysql_user: mysql_user:

View file

@ -1,3 +1,4 @@
---
# Tests scenarios for both plaintext and encrypted user passwords. # Tests scenarios for both plaintext and encrypted user passwords.
- vars: - vars: