From 69777ac4e845ed59eb74645487556ab9df792a53 Mon Sep 17 00:00:00 2001 From: Oleksandr Stepanov Date: Wed, 27 Nov 2024 15:08:46 +0100 Subject: [PATCH] feat: Added user with backup permissions only --- tasks/replication.yml | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/tasks/replication.yml b/tasks/replication.yml index f7c1681..7a82571 100644 --- a/tasks/replication.yml +++ b/tasks/replication.yml @@ -41,12 +41,17 @@ login_password: "{{ database_password }}" query: "SELECT pg_reload_conf()" -- name: Create postgres replication user +- name: Create postgres backup user community.postgresql.postgresql_user: login_host: "{{ postgres_replication_bind_address }}" login_user: "{{ database_username }}" login_password: "{{ database_password }}" name: "{{ backup_db_user }}" password: "{{ backup_db_password }}" - db: "{{ backup_db_name }}" - priv: "pg_read_all_data" + +- name: Grant role read_only to alice and bob + community.postgresql.postgresql_membership: + group: pg_read_all_data + target_roles: + - "{{ backup_db_user }}" + state: present