roles/services/tasks/mariadb.yml

@@ -68,3 +68,15 @@
     marker: "# {mark} ANSIBLE-MANAGED TMPFS ENTRY"
     block: |
       tmpfs /mnt/mysqltmp         tmpfs rw,size=6144M         0 0
+
+- name: Insert MySQL certificates
+  copy:
+    content: "{{ item.content }}"
+    dest: "{{ item.dest }}"
+    owner: mysql
+    group: mysql
+    mode: "{{ item.mode }}"
+  loop:
+    - { content: '{{ ca_mysql }}', dest: '/etc/mysql/ca.pem', mode: 'u=rw,g=r,o=r' }
+    - { content: '{{ cert_mysql }}', dest: '/etc/mysql/cert.pem', mode: 'u=rw,g=r,o=r' }
+    - { content: '{{ private_mysql }}', dest: '/etc/mysql/key.pem', mode: 'u=rw,g=,o=' }