PostgreSQL role management with Ansible

postgresql-role-mgmt.yml

---

- hosts: all
  vars:
    postgresql_roles:
      - { rolname: "anovikov", privileges: "LOGIN,CREATEROLE,CREATEDB", password: "qwerty" }
      - { rolname: "vpupkin", privileges: "LOGIN", password: "12345" }
  remote_user: root

  tasks:
    - name: Change roles or add new if not exists
      sudo: yes
      sudo_user: postgres
      postgresql_user:
        name: "{{ item.rolname }}"
        role_attr_flags: "{{ item.privileges }}"
        password: "{{  item.password }}"
        encrypted: yes
      with_items: postgresql_roles