chore: replaced deprecated privilege code (#497)

* chore: replaced deprecated privilege code * chore: replaced deprecated privs code for doorgeefluik --------- Co-authored-by: Tobias de Bruijn <[email protected]>
svsticky · Feb 11, 2025 · b9f1d48 · b9f1d48
1 parent 18afd5c
commit b9f1d48
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 5 deletions.
diff --git a/ansible/roles/databases/tasks/main.yml b/ansible/roles/databases/tasks/main.yml
@@ -34,15 +34,20 @@
     community.postgresql.postgresql_user:
       db: "koala"
       name: "koala"
-      priv: "ALL"
       role_attr_flags: "CREATEDB,LOGIN"
 
+  - name: "ensure koala user has the right privs"
+    community.postgresql.postgresql_privs:
+      db: "koala"
+      role: "koala"
+      objs: "ALL_IN_SCHEMA"
+      privs: "ALL"
+
   - name: "ensure dbeaver koala user exists"
     community.postgresql.postgresql_user:
       db: "koala"
       name: "koala_manual"
       password: "{{ secret_koala_manual.password }}"
-      priv: "CONNECT"
       role_attr_flags: "NOSUPERUSER"
 
   - name: "ensure dbeaver koala user has the right privs"
@@ -51,3 +56,10 @@
       role: "koala_manual"
       objs: "ALL_IN_SCHEMA"
       privs: "SELECT"
+
+  - name: "ensure dbeaver koala user has the right privs"
+    community.postgresql.postgresql_privs:
+      db: "koala"
+      role: "koala_manual"
+      type: "database"
+      privs: "CONNECT"
diff --git a/ansible/roles/doorgeefluik/tasks/main.yml b/ansible/roles/doorgeefluik/tasks/main.yml
@@ -23,6 +23,7 @@
 - name: "ensure database user exists"
   community.postgresql.postgresql_user:
     name: "doorgeefluik"
+    role_attr_flags: "CREATEDB,LOGIN"
   become_user: "postgres"
   become: true
 
@@ -34,11 +35,11 @@
   become: true
 
 - name: "ensure database user has the right privileges"
-  community.postgresql.postgresql_user:
+  community.postgresql.postgresql_privs:
     db: "doorgeefluik"
-    name: "doorgeefluik"
+    role: "doorgeefluik"
+    objs: "ALL_IN_SCHEMA"
     priv: "ALL"
-    role_attr_flags: "CREATEDB,LOGIN"
   become_user: "postgres"
   become: true
   ignore_errors: "{{ ansible_check_mode }}"