diff --git a/aws_confluence_dc_node.yml b/aws_confluence_dc_node.yml index 979f96b..693f7da 100644 --- a/aws_confluence_dc_node.yml +++ b/aws_confluence_dc_node.yml @@ -10,6 +10,8 @@ atl_jdbc_encoding: 'UTF-8' atl_jdbc_collation: 'en_US.UTF-8' + atl_proxy_name: "{{ lookup('env', 'ATL_PROXY_NAME') }}" + atl_tomcat_scheme: "{{ lookup('env', 'ATL_TOMCAT_SCHEME') }}" roles: - role: linux_common diff --git a/roles/database_init/tasks/main.yml b/roles/database_init/tasks/main.yml index 2df59db..1b238cb 100644 --- a/roles/database_init/tasks/main.yml +++ b/roles/database_init/tasks/main.yml @@ -10,6 +10,30 @@ password: "{{ atl_jdbc_password }}" expires: 'infinity' +- name: Assert ownership of public schema + postgresql_query: + login_host: "{{ atl_db_host }}" + login_user: "{{ atl_db_root_user }}" + login_password: "{{ atl_db_root_password }}" + db: "{{ atl_jdbc_db_name }}" + query: "ALTER SCHEMA public OWNER to {{ atl_db_root_password }};" + +- name: Grant privs to root user on public schema + postgresql_query: + login_host: "{{ atl_db_host }}" + login_user: "{{ atl_db_root_user }}" + login_password: "{{ atl_db_root_password }}" + db: "{{ atl_jdbc_db_name }}" + query: "GRANT ALL ON SCHEMA public TO {{ atl_db_root_password }};" + +- name: Grant privs to application user on public schema + postgresql_query: + login_host: "{{ atl_db_host }}" + login_user: "{{ atl_db_root_user }}" + login_password: "{{ atl_db_root_password }}" + db: "{{ atl_jdbc_db_name }}" + query: "GRANT ALL ON SCHEMA public TO {{ atl_jdbc_password }};" + - block: - name: Update root privs for new user