[airavata] 02/05: Don't give gfac db access if no gfac in hosts

[ma...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

machristie pushed a commit to branch staging
in repository https://gitbox.apache.org/repos/asf/airavata.git

commit f07015938bbcb29d7194bf4b208a4b1313cbb98b
Author: Marcus Christie <ma...@apache.org>
AuthorDate: Fri Apr 13 16:20:39 2018 -0400

    Don't give gfac db access if no gfac in hosts
---
 dev-tools/ansible/roles/database/tasks/main.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/dev-tools/ansible/roles/database/tasks/main.yml b/dev-tools/ansible/roles/database/tasks/main.yml
index fa7e985..ff2066c 100644
--- a/dev-tools/ansible/roles/database/tasks/main.yml
+++ b/dev-tools/ansible/roles/database/tasks/main.yml
@@ -121,9 +121,15 @@
   mysql_user: name="{{ db_user }}" password="{{ db_password }}" host="{{ item }}"
   with_items:
     - "{{ groups['api-orch'] }}"
-    - "{{ groups['gfac'] }}"
     - "localhost"
 
+# TODO: database access from GFac is no longer needed (GFac deprecated and only using Registry API)
+- name: give access to {{ db_user }} from remote
+  mysql_user: name="{{ db_user }}" password="{{ db_password }}" host="{{ item }}"
+  with_items:
+    - "{{ groups['gfac'] }}"
+  when: "'gfac' in groups"
+
 - name: create new user {{ db_user }} with all privilege
   mysql_user: name="{{ db_user }}"
               password="{{ db_password }}"

-- 
To stop receiving notification emails like this one, please contact
machristie@apache.org.