4fc4459684
Since ansible-core 2.10 it is recommended to use modules via FQCN In order to align with recommendation, we perform migration by applying suggestions made by `ansible-lint --fix=fqcn` Change-Id: I1ba53c1b0cc33cf7cad8057481275f5757c28b0a
101 lines
3.9 KiB
YAML
101 lines
3.9 KiB
YAML
---
|
|
- name: Ensure group backups exists
|
|
ansible.builtin.group:
|
|
name: "{{ galera_mariadb_backups_group_name }}"
|
|
state: present
|
|
gid: "{{ galera_mariadb_backups_group_gid | default(omit) }}"
|
|
|
|
- name: Create mariadb back up directory
|
|
ansible.builtin.file:
|
|
path: "{{ galera_mariadb_backups_path }}"
|
|
state: "directory"
|
|
owner: "mysql"
|
|
group: "{{ galera_mariadb_backups_group_name }}"
|
|
mode: "0750"
|
|
|
|
- name: Template out mariadb backup script
|
|
ansible.builtin.template:
|
|
src: "mariabackup_script.py.j2"
|
|
dest: "{{ galera_mariadb_backups_path }}/mariabackup_script.py"
|
|
mode: "0755"
|
|
|
|
- name: Template out mariabackup cnf file
|
|
ansible.builtin.template:
|
|
src: "mariabackup.cnf.j2"
|
|
dest: "{{ galera_mariadb_backups_cnf_file }}"
|
|
mode: "0644"
|
|
|
|
- name: Create service and timer for full backups
|
|
ansible.builtin.import_role:
|
|
name: systemd_service
|
|
vars:
|
|
systemd_service_enabled: true
|
|
systemd_service_restart_changed: false
|
|
systemd_overrides: "{{ galera_mariadb_backups_full_init_overrides }}"
|
|
systemd_user_name: "mysql"
|
|
systemd_group_name: "{{ galera_mariadb_backups_group_name }}"
|
|
systemd_services:
|
|
- service_name: "mariabackup-full"
|
|
execstarts:
|
|
- /usr/bin/python3 {{ galera_mariadb_backups_path }}/mariabackup_script.py {{ galera_mariadb_backups_path }}
|
|
--full-backup --copies={{ galera_mariadb_backups_full_copies }} --suffix={{ galera_mariadb_backups_suffix }}
|
|
--defaults-file={{ galera_mariadb_backups_cnf_file }}
|
|
--compress={{ galera_mariadb_backups_compress }} --compressor={{ galera_mariadb_backups_compressor }}
|
|
environment:
|
|
UMASK: "0640"
|
|
UMASK_DIR: "0750"
|
|
program_sandboxing:
|
|
RuntimeDirectory: "mariabackup-galera"
|
|
timer:
|
|
state: "started"
|
|
options:
|
|
OnCalendar: "{{ galera_mariadb_backups_full_on_calendar }}"
|
|
RandomizedDelaySec: "{{ galera_mariadb_backups_full_randomized_delay_sec }}"
|
|
Persistent: true
|
|
Unit: "mariabackup-full.service"
|
|
|
|
- name: Create service and timer for incremental backups
|
|
ansible.builtin.import_role:
|
|
name: systemd_service
|
|
vars:
|
|
systemd_service_enabled: true
|
|
systemd_service_restart_changed: false
|
|
systemd_overrides: "{{ galera_mariadb_backups_increment_init_overrides }}"
|
|
systemd_user_name: "mysql"
|
|
systemd_group_name: "{{ galera_mariadb_backups_group_name }}"
|
|
systemd_services:
|
|
- service_name: "mariabackup-increment"
|
|
execstarts:
|
|
- /usr/bin/python3 {{ galera_mariadb_backups_path }}/mariabackup_script.py {{ galera_mariadb_backups_path }}
|
|
--increment --copies={{ galera_mariadb_backups_full_copies }} --suffix={{ galera_mariadb_backups_suffix }}
|
|
--defaults-file={{ galera_mariadb_backups_cnf_file }}
|
|
--compress={{ galera_mariadb_backups_compress }} --compressor={{ galera_mariadb_backups_compressor }}
|
|
environment:
|
|
UMASK: "0640"
|
|
UMASK_DIR: "0750"
|
|
program_sandboxing:
|
|
RuntimeDirectory: "mariabackup-galera"
|
|
timer:
|
|
state: "started"
|
|
options:
|
|
OnCalendar: "{{ galera_mariadb_backups_increment_on_calendar }}"
|
|
RandomizedDelaySec: "{{ galera_mariadb_backups_increment_randomized_delay_sec }}"
|
|
Persistent: true
|
|
Unit: "mariabackup-increment.service"
|
|
when: galera_mariadb_backups_increment_on_calendar is defined
|
|
|
|
- name: Grant access to the database for the backup service
|
|
delegate_to: "{{ galera_db_setup_host }}"
|
|
vars:
|
|
ansible_python_interpreter: "{{ galera_db_setup_python_interpreter }}"
|
|
community.mysql.mysql_user:
|
|
name: "{{ galera_mariadb_backups_user }}"
|
|
password: "{{ galera_mariadb_backups_password }}"
|
|
host: "%"
|
|
priv: "*.*:RELOAD,PROCESS,LOCK TABLES,REPLICATION CLIENT"
|
|
append_privs: true
|
|
login_unix_socket: "{{ galera_unix_socket }}"
|
|
check_hostname: false
|
|
no_log: true
|
|
run_once: true
|