Merge pull request #6869 from cove/mongodb_user

add replica_set attr to mongodb_user module
This commit is contained in:
Michael DeHaan 2014-04-07 13:57:28 -04:00
commit e01bf39c45

View file

@ -2,6 +2,7 @@
# (c) 2012, Elliott Foster <elliott@fourkitchens.com> # (c) 2012, Elliott Foster <elliott@fourkitchens.com>
# Sponsored by Four Kitchens http://fourkitchens.com. # Sponsored by Four Kitchens http://fourkitchens.com.
# (c) 2014, Epic Games, Inc.
# #
# This file is part of Ansible # This file is part of Ansible
# #
@ -46,6 +47,12 @@ options:
- The port to connect to - The port to connect to
required: false required: false
default: 27017 default: 27017
replica_set:
version_added: "1.6"
description:
- Replica set to connect to (automatically connects to primary for writes)
required: false
default: null
database: database:
description: description:
- The name of the database to add/remove the user from - The name of the database to add/remove the user from
@ -92,12 +99,17 @@ EXAMPLES = '''
- mongodb_user: database=burgers name=ben password=12345 roles='read' state=present - mongodb_user: database=burgers name=ben password=12345 roles='read' state=present
- mongodb_user: database=burgers name=jim password=12345 roles='readWrite,dbAdmin,userAdmin' state=present - mongodb_user: database=burgers name=jim password=12345 roles='readWrite,dbAdmin,userAdmin' state=present
- mongodb_user: database=burgers name=joe password=12345 roles='readWriteAnyDatabase' state=present - mongodb_user: database=burgers name=joe password=12345 roles='readWriteAnyDatabase' state=present
# add a user to database in a replica set, the primary server is automatically discovered and written to
- mongodb_user: database=burgers name=bob replica_set=blecher password=12345 roles='readWriteAnyDatabase' state=present
''' '''
import ConfigParser import ConfigParser
from distutils.version import LooseVersion
try: try:
from pymongo.errors import ConnectionFailure from pymongo.errors import ConnectionFailure
from pymongo.errors import OperationFailure from pymongo.errors import OperationFailure
from pymongo import version as PyMongoVersion
from pymongo import MongoClient from pymongo import MongoClient
except ImportError: except ImportError:
try: # for older PyMongo 2.2 try: # for older PyMongo 2.2
@ -114,34 +126,25 @@ else:
# #
def user_add(module, client, db_name, user, password, roles): def user_add(module, client, db_name, user, password, roles):
try: db = client[db_name]
db = client[db_name] if roles is None:
if roles is None: db.add_user(user, password, False)
db.add_user(user, password, False) else:
else: try:
try: db.add_user(user, password, None, roles=roles)
db.add_user(user, password, None, roles=roles) except OperationFailure, e:
except: err_msg = str(e)
module.fail_json(msg='"problem adding user; you must be on mongodb 2.4+ and pymongo 2.5+ to use the roles param"') if LooseVersion(PyMongoVersion) <= LooseVersion('2.5'):
except OperationFailure: err_msg = err_msg + ' (Note: you must be on mongodb 2.4+ and pymongo 2.5+ to use the roles param)'
return False module.fail_json(msg=err_msg)
return True
def user_remove(client, db_name, user): def user_remove(client, db_name, user):
try: db = client[db_name]
db = client[db_name] db.remove_user(user)
db.remove_user(user)
except OperationFailure:
return False
return True
def load_mongocnf(): def load_mongocnf():
config = ConfigParser.RawConfigParser() config = ConfigParser.RawConfigParser()
mongocnf = os.path.expanduser('~/.mongodb.cnf') mongocnf = os.path.expanduser('~/.mongodb.cnf')
if not os.path.exists(mongocnf):
return False
try: try:
config.readfp(open(mongocnf)) config.readfp(open(mongocnf))
@ -165,6 +168,7 @@ def main():
login_password=dict(default=None), login_password=dict(default=None),
login_host=dict(default='localhost'), login_host=dict(default='localhost'),
login_port=dict(default='27017'), login_port=dict(default='27017'),
replica_set=dict(default=None),
database=dict(required=True, aliases=['db']), database=dict(required=True, aliases=['db']),
user=dict(required=True, aliases=['name']), user=dict(required=True, aliases=['name']),
password=dict(aliases=['pass']), password=dict(aliases=['pass']),
@ -180,6 +184,7 @@ def main():
login_password = module.params['login_password'] login_password = module.params['login_password']
login_host = module.params['login_host'] login_host = module.params['login_host']
login_port = module.params['login_port'] login_port = module.params['login_port']
replica_set = module.params['replica_set']
db_name = module.params['database'] db_name = module.params['database']
user = module.params['user'] user = module.params['user']
password = module.params['password'] password = module.params['password']
@ -187,38 +192,48 @@ def main():
state = module.params['state'] state = module.params['state']
try: try:
client = MongoClient(login_host, int(login_port)) if replica_set:
client = MongoClient(login_host, int(login_port), replicaset=replica_set)
else:
client = MongoClient(login_host, int(login_port))
# try to authenticate as a target user to check if it already exists
try:
client[db_name].authenticate(user, password)
if state == 'present':
module.exit_json(changed=False, user=user)
except OperationFailure:
if state == 'absent':
module.exit_json(changed=False, user=user)
if login_user is None and login_password is None:
mongocnf_creds = load_mongocnf()
if mongocnf_creds is not False:
login_user = mongocnf_creds['user']
login_password = mongocnf_creds['password']
elif login_password is None and login_user is not None:
module.fail_json(msg='when supplying login arguments, both login_user and login_password must be provided')
if login_user is not None and login_password is not None:
client.admin.authenticate(login_user, login_password)
except ConnectionFailure, e: except ConnectionFailure, e:
module.fail_json(msg='unable to connect to database, check login_host and login_port are correct') module.fail_json(msg='unable to connect to database: %s' % str(e))
# try to authenticate as a target user to check if it already exists
try:
client[db_name].authenticate(user, password)
if state == 'present':
module.exit_json(changed=False, user=user)
except OperationFailure:
if state == 'absent':
module.exit_json(changed=False, user=user)
if login_user is None and login_password is None:
mongocnf_creds = load_mongocnf()
if mongocnf_creds is not False:
login_user = mongocnf_creds['user']
login_password = mongocnf_creds['password']
elif login_password is None and login_user is not None:
module.fail_json(msg='when supplying login arguments, both login_user and login_password must be provided')
if login_user is not None and login_password is not None:
client.admin.authenticate(login_user, login_password)
if state == 'present': if state == 'present':
if password is None: if password is None:
module.fail_json(msg='password parameter required when adding a user') module.fail_json(msg='password parameter required when adding a user')
if user_add(module, client, db_name, user, password, roles) is not True:
module.fail_json(msg='Unable to add or update user, check login_user and login_password are correct and that this user has access to the admin collection') try:
user_add(module, client, db_name, user, password, roles)
except OperationFailure, e:
module.fail_json(msg='Unable to add or update user: %s' % str(e))
elif state == 'absent': elif state == 'absent':
if user_remove(client, db_name, user) is not True: try:
module.fail_json(msg='Unable to remove user, check login_user and login_password are correct and that this user has access to the admin collection') user_remove(client, db_name, user)
except OperationFailure, e:
module.fail_json(msg='Unable to remove user: %s' % str(e))
module.exit_json(changed=True, user=user) module.exit_json(changed=True, user=user)