diff --git a/pillar.example b/pillar.example index d817ad2..349113e 100644 --- a/pillar.example +++ b/pillar.example @@ -10,6 +10,7 @@ postgres: users: localUser: + ensure: present password: '98ruj923h4rf' createdb: False createroles: False @@ -18,6 +19,16 @@ postgres: replication: False remoteUser: + ensure: present + password: '98ruj923h4rf' + createdb: False + createroles: False + createuser: False + inherit: True + replication: False + + absentUser: + ensure: absent password: '98ruj923h4rf' createdb: False createroles: False diff --git a/postgres/init.sls b/postgres/init.sls index 8e0b84e..6d3e8d2 100644 --- a/postgres/init.sls +++ b/postgres/init.sls @@ -78,6 +78,7 @@ pg_hba.conf: {% for name, user in postgres.users.items() %} postgres-user-{{ name }}: +{% if user.get('ensure', 'present') == 'present' %} postgres_user.present: - name: {{ name }} - createdb: {{ user.get('createdb', False) }} @@ -90,6 +91,13 @@ postgres-user-{{ name }}: - superuser: {{ user.get('superuser', False) }} - require: - service: {{ postgres.service }} +{% else %} + postgres_user.absent: + - name: {{ name }} + - user: {{ user.get('runas', 'postgres') }} + - require: + - service: {{ postgres.service }} +{% endif %} {% endfor%} {% for name, db in postgres.databases.items() %}