ansible-roles/mysql/tasks/users_jessie.yml

---

# dependency for mysql_user and mysql_db

- name: python-mysqldb is installed (Ansible dependency)
  apt:
    name: python-mysqldb
    state: present
  tags:
  - mysql

- name: create a password for mysqladmin
  command: "apg -n 1 -m 16 -M lcN"
  register: mysql_admin_password
  changed_when: False
  check_mode: no
  tags:
  - mysql

- name: there is a mysqladmin user
  mysql_user:
    name: mysqladmin
    password: '{{ mysql_admin_password.stdout }}'
    priv: "*.*:ALL,GRANT"
    update_password: on_create
    state: present
    config_file: "/etc/mysql/debian.cnf"
  register: create_mysqladmin_user
  tags:
  - mysql

- name: mysqladmin is the default user
  ini_file:
    dest: /root/.my.cnf
    mode: "0600"
    section: client
    option: '{{ item.option }}'
    value: '{{ item.value }}'
    create: yes
  with_items:
    - { option: 'user', value: 'mysqladmin' }
    - { option: password, value: '{{ mysql_admin_password.stdout }}' }
  when: create_mysqladmin_user.changed
  tags:
  - mysql

- name: remove root user
  mysql_user:
    name: root
    host_all: yes
    config_file: "/root/.my.cnf"
    state: absent
  tags:
  - mysql