ansible-collection-hardening/molecule/mysql_hardening/prepare_tasks/mysql_users.yml

---
- name: Create users for test
  ansible.mysql.mysql_query:
    query:
      - CREATE USER 'user'@'delete';
      - CREATE USER 'user'@'127.0.0.1';
      - CREATE USER 'user'@'::1';
      - CREATE USER 'user'@'%';
      - CREATE USER 'user'@'192.168.0.%';
      - CREATE USER 'user'@'192.168.0.1';
      - CREATE USER    '%'@'192.168.0.1';
      - CREATE USER 'user'@'192.168.0.2' IDENTIFIED BY 'keep';
      - CREATE USER 'user'@'keep' IDENTIFIED BY 'keep';
      - CREATE USER 'user'@'192.168.%' IDENTIFIED BY 'keep';
    login_unix_socket: "{{ login_unix_socket | default(omit) }}"

- name: Detect role support on MySQL
  ansible.mysql.mysql_query:
    query: >
      SELECT 1 FROM information_schema.COLUMNS
                WHERE TABLE_SCHEMA = 'mysql' AND TABLE_NAME = 'user'
                AND COLUMN_NAME = 'is_role';
    login_unix_socket: "{{ login_unix_socket | default(omit) }}"
  register: mysql_role_support

- name: Create roles for test
  ansible.mysql.mysql_query:
    query:
      - CREATE ROLE 'role_keep';
    login_unix_socket: "{{ login_unix_socket | default(omit) }}"
  when:
    - mysql_role_support.rowcount[0] > 0