Merge "Move database creation into role"

defaults/main.yml

@@ -78,6 +78,8 @@ horizon_service_region: RegionOne
 horizon_service_name: horizon
 
 ## Database info
+horizon_db_setup_host: "{{ ('galera_all' in groups) | ternary(groups['galera_all'][0], 'localhost') }}"
+horizon_galera_address: "{{ galera_address | default('127.0.0.1') }}"
 horizon_galera_database: dash
 horizon_galera_user: dash
 horizon_galera_use_ssl: "{{ galera_use_ssl | default(False) }}"

examples/playbook.yml

@@ -11,7 +11,6 @@
     horizon_container_mysql_password: "SuperSecrete"
     horizon_secret_key: "SuperSecreteHorizonKey"
     horizon_external_ssl: true
-    galera_root_password: "secrete"
     rabbitmq_servers: 10.100.100.101
     rabbitmq_use_ssl: false
     rabbitmq_port: 5671
@@ -28,3 +27,7 @@
     openrc_os_domain_name: "Default"
     memcached_servers: 10.100.100.101
     memcached_encryption_key: "secrete"
+    galera_root_user: root
+  vars_prompt:
+    - name: "galera_root_password"
+      prompt: "What is galera_root_password?"

tasks/horizon_db_setup.yml

@@ -13,6 +13,32 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+- name: Create DB for service
+  mysql_db:
+    login_user: "{{ galera_root_user }}"
+    login_password: "{{ galera_root_password }}"
+    login_host: "{{ horizon_galera_address }}"
+    name: "{{ horizon_galera_database }}"
+    state: "present"
+  delegate_to: "{{ horizon_db_setup_host }}"
+  no_log: True
+
+- name: Grant access to the DB for the service
+  mysql_user:
+    login_user: "{{ galera_root_user }}"
+    login_password: "{{ galera_root_password }}"
+    login_host: "{{ horizon_galera_address }}"
+    name: "{{ horizon_galera_user }}"
+    password: "{{ horizon_container_mysql_password }}"
+    host: "{{ item }}"
+    state: "present"
+    priv: "{{ horizon_galera_database }}.*:ALL"
+  delegate_to: "{{ horizon_db_setup_host }}"
+  with_items:
+    - "localhost"
+    - "%"
+  no_log: True
+
 - name: Perform a horizon DB sync
   command: "{{ horizon_bin }}/horizon-manage.py migrate --noinput"
   become: yes