Content-Type: text/plain;
	charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51\))
Subject: Re: Initial Postgres admin account setup using Ansible?
From: Christophe Pettus <xof@thebuild.com>
In-Reply-To: <75b177a0f2627519419009a2134fe050f3f623cb.camel@ageofdream.com>
Date: Tue, 31 Dec 2024 14:10:11 -0800
Cc: pgsql-general@lists.postgresql.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <DB47A2EB-C060-4AE7-842A-D10C6CF68FC4@thebuild.com>
References: <75b177a0f2627519419009a2134fe050f3f623cb.camel@ageofdream.com>
To: Nick <lists2@ageofdream.com>
Archived-At: <https://www.postgresql.org/message-id/DB47A2EB-C060-4AE7-842A-D10C6CF68FC4%40thebuild.com>
Precedence: bulk

On Dec 31, 2024, at 13:31, Nick <lists2@ageofdream.com> wrote:
> What is the proper (secure) way to let the Ansible POSIX user manage
> postgres? It seems there should be a fully automated way to bootstrap
> an Ansible user for `postgres`.

This is generally done with "become" and "become_user" in a shell =
command, something like:

- name: Do something as the postgres user
  ansible.builtin.shell: "psql ..."
  register: pgbackrest_which_output
  become: true
  become_user: postgres