Topics
This changelog describes changes after version 2.0.0.
This is a patch release of the ansible.mariadb collection. It only contains documentation fixes.
This is a patch release of the ansible.mariadb collection. It only contains fixes of broken links in README.
This is the first release of the ansible.mariadb collection. This collection was cloned from the ansible.mysql collection to allow its contributors and maintainers to focus on MariaDB-related automation development. MySQL is NOT supported by the ansible.mariadb collection.
- The mysql_clone, mysql_resource_group, and mysql_resource_group_info have been removed from the ansible.mariadb collection because they do not support MariaDB.
- This ansible.mariadb collection only supports MariaDB. Please do NOT use this collection for MySQL automation - use the ansible.mysql collection instead.
This is a minor release of the ansible.mysql collection.
This changelog contains all changes that have been made to this collection after the previous release.
- CI - MySQL 8.0.38 has been removed from the CI test matrix because MySQL 8.0 reached End of Life in April 2026. The collection still supports MySQL 8.0 at runtime through version-conditional code paths.
- CI - PyMySQL 0.9.3 and 1.0.2 have been removed from the CI test matrix. PyMySQL 0.9.3 is unmaintained and has an unfixed CVE-2024-36039. PyMySQL 1.0.2 is redundant with 1.1.1 as both cover the same code path. PyMySQL 0.10.1 has been promoted to the main test matrix.
- mysql_user - fix errors on MySQL 9.7.0+ caused by removal of SHA1() SQL function and mysql_native_password plugin. The module now uses
IDENTIFIED BYfor password management on MySQL 9.7.0+.
- mysql_binlog_info - Gather MySQL or MariaDB binary log information
- mysql_clone - Clone a MySQL instance from a donor server
- mysql_perf_schema - Manage MySQL or MariaDB Performance Schema setup tables
- mysql_resource_group - Add, update, or remove MySQL resource groups
- mysql_resource_group_info - Gather information about MySQL resource groups
- mysql_slow_log - Manage MySQL or MariaDB slow query log settings
This is a patch release of the ansible.mysql collection. This changelog contains all changes to the modules and plugins in this collection that have been made after the previous release. Specifically, it contains documentation fixes, changes to ansible-lint configuration, and adds execution environments configuration.
This is a major release of the ansible.mysql collection.
Since this version, ansible.mysql superseds the community.mysql collection.
- The collection supports ansible-core version
>= 2.16.0. - mysql_user - the deprecated
useralias of thenameargument has been removed. Use thenameargument instead.
This is a patch release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.
- mysql_query - fix
Value of unknown typeerror when query results contain non-JSON-serializable types such asdecimal.Decimalordatetime. Results are now round-tripped throughjson.dumps(default=str)before being returned, coercing unserializable values to their string representation (ansible-collections/ansible.mysql#783).
This is a minor release of the ansible.mysql collection.
This changelog contains all breaking changes to the modules in this collection
- Update imports from ansible.module_utils._text to use ansible.module_utils.common.text.converters
- Update imports from ansible.module_utils.six to use their python3 equivalent. This change will make this collection incompatible for managed hosts on python2.7.
- mysql_user - When creating a new user, and specifying parsec as plugin it wil generate the wrong SQL query. It should be added to the same plugin check as ed25519 so that it generates a query using USING PASSWORDS(%s) instead of BY %s (ansible-collections/ansible.mysql#779).
This is a minor release of the ansible.mysql collection.
This changelog contains all breaking changes to the modules in this collection
that have been added after the previous release.
- mysql_role - add
sql_log_binoption to disable binary logging for the connection (ansible-collections/ansible.mysql#742).
This is a patch release of the ansible.mysql collection.
This changelog contains all breaking changes to the modules in this collection
that have been added after the previous release.
- mysql_info - Fix slave status for source terminology introduced in MySQL 8.0.23 (ansible-collections/ansible.mysql#682).
- mysql_user, mysql_role - fix not existent grant when revoking perms on user/role which do not have any other perms than grant option (ansible-collections/ansible.mysql#664).
This is a major release of the ansible.mysql collection.
This changelog contains all breaking changes to the modules in this collection
that have been added after the release of ansible.mysql 3.16.0.
- Since version 4.0.0, the collection accepts code written in Python 3. Modules aren't tested against Python 2 and might not work in Python 2 environments.
- collection - stop testing against mysqlclient connector as its support was deprecated in this collection - use PyMySQL connector instead! It'll stop working in 5.0.0 when we remove all related code (ansible-collections/ansible.mysql#654).
- mysql_db - the
pipefailargument's default value is set totrue. If your target machines do not usebashas a default interpreter, setpipefailtofalseexplicitly. However, we strongly recommend setting upbashas a default andpipefail=trueas it will protect you from getting broken dumps you don't know about (ansible-collections/ansible.mysql#407). - mysql_info - The
users_infofilter does not return theplugin_auth_stringfield anymore. Use the plugin_hash_string return value instead (ansible-collections/ansible.mysql#629). - mysql_role - the
column_case_sensitiveargument's default value has been changed totrue. If your playbook expected the column to be automatically uppercased for your users privileges, you should set this tofalseexplicitly (ansible-collections/ansible.mysql#578). - mysql_user - the
column_case_sensitiveargument's default value has been changed totrue. If your playbook expected the column to be automatically uppercased for your users privileges, you should set this tofalseexplicitly (ansible-collections/ansible.mysql#577).
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.
- mysql_query - add new session_vars argument, similar to ansible-collections/ansible.mysql#489.
This is a minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.'
- mysql_db - Add support for
sql_log_binoption (ansible-collections/ansible.mysql#700).
- mysql_query - fix a Python 2 compatibility issue caused by the addition of
execution_time_msin version 3.12 (see ansible-collections/ansible.mysql#716). - mysql_user - fix a crash (unable to parse the MySQL grant string: SET DEFAULT ROLE somerole FOR someuser`@`%) when using the
mysql_usermodule with a DEFAULT role present in MariaDB. The DEFAULT role is now ignored by the parser (ansible-collections/ansible.mysql#710).
This is a minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.'
- mysql_replication - change default value for
primary_ssl_verify_server_certfrom False to None. This should not affect existing playbooks (ansible-collections/ansible.mysql#707).
- mysql_info - fix a crash (ERROR 1141, There is no such grant defined for user 'PUBLIC' on host '%') when using the
users_infofilter with a PUBLIC role present in MariaDB 10.11+. Do note that the fix doesn't change the fact that the module won't return the privileges from the PUBLIC role in the users privileges list. It can't do that because you have to login as the particular user and use SHOW GRANTS FOR CURRENT_USER. We considered using an aggregation with the SHOW GRANTS FOR PUBLIC command. However, this approach would make copying users from one server to another transform the privileges inherited from the role as if they were direct privileges on the user. - mysql_replication - fixed an issue where setting
primary_ssl_verify_server_certto false had no effect (ansible-collections/ansible.mysql#689).
This is a minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this
collection that have been made after the previous release.
- Integration tests for MariaDB 11.4 have replaced those for 10.5. The previous version is now 10.11.
- mysql_user - add
lockedoption to lock/unlock users, this is mainly used to have users that will act as definers on stored procedures.
- mysql_db - fix dump and import to find MariaDB binaries (mariadb and mariadb-dump) when MariaDB 11+ is used and symbolic links to MySQL binaries are absent.
This is a minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this
collection that have been made after the previous release.
- mysql_db - added
zstd(de)compression support forimport/dumpstates (ansible-collections/ansible.mysql#696). - mysql_query - returns the
execution_time_mslist containing execution time per query in milliseconds.
This is a minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this collection that have been made after the previous release.
- mysql_info - adds the count of tables for each database to the returned values. It is possible to exclude this new field using the
db_table_countexclusion filter. (ansible-collections/ansible.mysql#691)
- mysql_user,mysql_role - The sql_mode ANSI_QUOTES affects how the modules mysql_user and mysql_role compare the existing privileges with the configured privileges, as well as decide whether double quotes or backticks should be used in the GRANT statements. Pointing out in issue 671, the modules mysql_user and mysql_role allow users to enable/disable ANSI_QUOTES in session variable (within a DB session, the session variable always overwrites the global one). But due to the issue, the modules do not check for ANSI_MODE in the session variable, instead, they only check in the GLOBAL one.That behavior is not only limiting the users' flexibility, but also not allowing users to explicitly disable ANSI_MODE to work around such bugs like https://bugs.mysql.com/bug.php?id=115953. (ansible-collections/ansible.mysql#671)
This is a bugfix release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this
collection that have been made after the previous release.
- mysql_user - add correct
ed25519auth plugin handling when creating a user (ansible-collections/ansible.mysql#676).
This is a bugfix release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this
collection that have been made after the previous release.
- mysql_user - add correct
ed25519auth plugin handling when creating a user (ansible-collections/ansible.mysql#672).
This is a patch release of the ansible.mysql collection.
Besides a bugfix, it contains an important upcoming breaking-change information.
- mysql_user - the
useralias of thenameargument has been deprecated and will be removed in collection version 5.0.0. Use thenameargument instead.
- mysql_user - module makes changes when is executed with
plugin_auth_stringparameter and check mode.
This is a minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this
collection that have been made after the previous release.
- mysql_info - Add
tls_requiresreturned value for theusers_infofilter (ansible-collections/ansible.mysql#628). - mysql_info - return a database server engine used (ansible-collections/ansible.mysql#644).
- mysql_replication - Adds support for CHANGE REPLICATION SOURCE TO statement (ansible-collections/ansible.mysql#635).
- mysql_replication - Adds support for SHOW BINARY LOG STATUS and SHOW BINLOG STATUS on getprimary mode.
- mysql_replication - Improve detection of IsReplica and IsPrimary by inspecting the dictionary returned from the SQL query instead of relying on variable types. This ensures compatibility with changes in the connector or the output of SHOW REPLICA STATUS and SHOW MASTER STATUS, allowing for easier maintenance if these change in the future.
- mysql_user - Add salt parameter to generate static hash for caching_sha2_password and sha256_password plugins.
- collection - support of mysqlclient connector is deprecated - use PyMySQL connector instead! We will stop testing against it in collection version 4.0.0 and remove the related code in 5.0.0 (ansible-collections/ansible.mysql#654).
- mysql_info - The
users_infofilter returned variableplugin_auth_stringcontains the hashed password and it's misleading, it will be removed from ansible.mysql 4.0.0. Use the plugin_hash_string return value instead (ansible-collections/ansible.mysql#629).
- mysql_info - Add
plugin_hash_stringtousers_infofilter's output. The existingplugin_auth_stringcontained the hashed password and thus is missleading, it will be removed from ansible.mysql 4.0.0. (ansible-collections/ansible.mysql#629). - mysql_user - Added a warning to update_password's on_new_username option if multiple accounts with the same username but different passwords exist (ansible-collections/ansible.mysql#642).
- mysql_user - Fix
tls_requiresnot removingSSLandX509when sets as empty (ansible-collections/ansible.mysql#628). - mysql_user - Fix idempotence when using variables from the
users_infofilter ofmysql_infoas an input (ansible-collections/ansible.mysql#628). - mysql_user - Fixed an IndexError in the update_password functionality introduced in PR ansible-collections/ansible.mysql#580 and released in ansible.mysql 3.8.0. If you used this functionality, please avoid versions 3.8.0 to 3.9.0 (ansible-collections/ansible.mysql#642).
- mysql_user - add correct
ed25519auth plugin handling (ansible-collections/ansible.mysql#6). - mysql_variables - fix the module always changes on boolean values (ansible-collections/ansible.mysql#652).
This is a minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this
collection that have been made after the previous release.
- Collection version 2.*.* is EOL, no more bugfixes will be backported. Please consider upgrading to the latest version.
- mysql_user - add the
password_expireandpassword_expire_intervalarguments to implement the password expiration management for mysql user (ansible-collections/ansible.mysql#598). - mysql_user - add user attribute support via the
attributesparameter and return value (ansible-collections/ansible.mysql#604).
- mysql_info - the
slave_statusfilter was returning an empty list on MariaDB with multiple replication channels. It now returns all channels by runningSHOW ALL SLAVES STATUSfor MariaDB servers (ansible-collections/ansible.mysql#603).
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this
collection that have been made after the previous release.
- The ansible.mysql collection no longer supports
ansible-core 2.12andansible-core 2.13. While we take no active measures to prevent usage and there are no plans to introduce incompatible code to the modules, we will stop testing those versions. Both are or will soon be End of Life and if you are still using them, you should consider upgrading to thelatest Ansible / ansible-core 2.15 or lateras soon as possible (ansible-collections/ansible.mysql#574). - mysql_role - the
column_case_sensitiveargument's default value will be changed totruein ansible.mysql 4.0.0. If your playbook expected the column to be automatically uppercased for your roles privileges, you should set this to false explicitly (ansible-collections/ansible.mysql#578). - mysql_user - the
column_case_sensitiveargument's default value will be changed totruein ansible.mysql 4.0.0. If your playbook expected the column to be automatically uppercased for your users privileges, you should set this to false explicitly (ansible-collections/ansible.mysql#577).
- mysql_info - add filter
users_info(ansible-collections/ansible.mysql#580). - mysql_role - add
column_case_sensitiveoption to prevent field names from being uppercased (ansible-collections/ansible.mysql#569). - mysql_user - add
column_case_sensitiveoption to prevent field names from being uppercased (ansible-collections/ansible.mysql#569).
This is a patch release of the ansible.mysql collection. This changelog contains all changes to the modules and plugins in this collection that have been made after the previous release.
- mysql module utils - use the connection arguments
dbinstead ofdatabaseandpasswdinstead ofpasswordwhen running with MySQLdb < 2.0.0 (ansible-collections/ansible.mysql#553).
This is a patch release of the ansible.mysql collection. This changelog contains all changes to the modules and plugins in this collection that have been made after the previous release.
- mysql module utils - use the connection arguments
dbinstead ofdatabaseandpasswdinstead ofpasswordwhen running with older mysql drivers (MySQLdb < 2.1.0 or PyMySQL < 1.0.0) (ansible-collections/ansible.mysql#551).
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.
- mysql module utils - change deprecated connection parameters
passwdanddbtopasswordanddatabase(ansible-collections/ansible.mysql#177). - mysql_user - add
MAX_STATEMENT_TIMEsupport for mariadb to theresource_limitsargument (ansible-collections/ansible.mysql#211).
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.
- mysql_info - add
connector_nameandconnector_versionto returned values (ansible-collections/ansible.mysql#497). - mysql_role - enable auto_commit to avoid MySQL metadata table lock (ansible-collections/ansible.mysql#479).
- mysql_user - add plugin_auth_string as optional parameter to use a specific pam service if pam/auth_pam plugin is used (ansible-collections/ansible.mysql#445).
- mysql_user - add the
session_varsargument to set session variables at the beginning of module execution (ansible-collections/ansible.mysql#478). - mysql_user - display a more informative invalid privilege exception. Changes the exception handling of the granting permission logic to show the query executed , params and the exception message granting privileges fails` (ansible-collections/ansible.mysql#465).
- mysql_user - enable auto_commit to avoid MySQL metadata table lock (ansible-collections/ansible.mysql#479).
- setup_mysql - update MySQL tarball URL (ansible-collections/ansible.mysql#491).
- mysql_user - when revoke privs consists only of
GRANT, a 2nd revoke query is executed with empty privs to revoke that ended in an SQL exception (ansible-collections/ansible.mysql#503). - mysql_variables - add uppercase character pattern to regex to allow GLOBAL variables containing uppercase characters. This recognizes variable names used in Galera, for example,
wsrep_OSU_method, which breaks the normal pattern of all lowercase characters (ansible-collections/ansible.mysql#501).
This is the patch release of the ansible.mysql collection.
This changelog contains all changes to the modules and plugins in this collection
that have been made after the previous release.
- mysql_user, mysql_role - mysql/mariadb recent versions translate 'ALL PRIVILEGES' to a list of specific privileges. That caused a change every time we modified user privileges. This fix compares privs before and after user modification to avoid this infinite change (ansible-collections/ansible.mysql#77).
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.4.0.
- mysql_replication - add a new option:
primary_ssl_verify_server_cert(https://github.com//pull/435).
- mysql_user - grant option was revoked accidentally when modifying users. This fix revokes grant option only when privs are setup to do that (ansible-collections/ansible.mysql#77 (comment)).
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.3.0.
- mysql_db - the
pipefailargument's default value will be changed totruein ansible.mysql 4.0.0. If your target machines do not usebashas a default interpreter, setpipefailtofalseexplicitly. However, we strongly recommend setting upbashas a default andpipefail=trueas it will protect you from getting broken dumps you don't know about (ansible-collections/ansible.mysql#407).
- mysql_db - add the
chdirargument to avoid failings when a dump file contains relative paths (ansible-collections/ansible.mysql#395). - mysql_db - add the
pipefailargument to avoid broken dumps whenstateisdumpand compression is used (ansible-collections/ansible.mysql#256).
- Include
simplified_bsd.txtlicense file for various module utils. - mysql_db - Using compression masks errors messages from mysql_dump. By default the fix is inactive to ensure retro-compatibility with system without bash. To activate the fix, use the module option
pipefail=true(ansible-collections/ansible.mysql#256). - mysql_replication - when the
primary_sslargument is set tono, the module will turn off SSL (ansible-collections/ansible.mysql#393).
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.2.1.
- mysql_role - add the argument
members_must_exist(boolean, default true). The assertion that the users supplied in themembersargument exist is only executed when the new argumentmembers_must_exististrue, to allow opt-out (ansible-collections/ansible.mysql#369). - mysql_user - Add the option
on_new_usernameto argumentupdate_passwordto reuse the password (plugin and authentication_string) when creating a new user if some user with the same name already exists. If the existing user with the same name have varying passwords, the password from the arguments is used like withupdate_password: always(ansible-collections/ansible.mysql#365). - mysql_user - Add the result field
password_changed(boolean). It is true, when the user got a new password. When the user was created withupdate_password: on_new_usernameand an existing password was reused,password_changedis false (ansible-collections/ansible.mysql#365).
- mysql_query - fix false change reports when
IF EXISTS/IF NOT EXISTSclause is used (ansible-collections/ansible.mysql#268). - mysql_role - don't add members to a role when creating the role and
detach_members: trueis set (ansible-collections/ansible.mysql#367). - mysql_role - in some cases (when "SHOW GRANTS" did not use backticks for quotes), no unwanted members were detached from the role (and redundant "GRANT" statements were executed for wanted members). This is fixed by querying the existing role members from the mysql.role_edges (MySQL) or mysql.roles_mapping (MariaDB) tables instead of parsing the "SHOW GRANTS" output (ansible-collections/ansible.mysql#368).
- mysql_user - fix logic when
update_passwordis set toon_createfor users usingplugin*arguments (ansible-collections/ansible.mysql#334). Theon_createsetspasswordto None for old mysql_native_authentication but not for authentiation methods which uses theplugin*arguments. This PR changes this soon_createalso exchangeplugin,plugin_hash_string,plugin_auth_stringto None in the list of arguments to change
This is the patch release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.2.0.
- Include
PSF-license.txtfile forplugins/module_utils/_version.py.
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.1.3.
- The ansible.mysql collection no longer supports
Ansible 2.9andansible-base 2.10. While we take no active measures to prevent usage and there are no plans to introduce incompatible code to the modules, we will stop testing againstAnsible 2.9andansible-base 2.10. Both will very soon be End of Life and if you are still using them, you should consider upgrading to thelatest Ansible / ansible-core 2.11 or lateras soon as possible (ansible-collections/ansible.mysql#343).
- mysql_user and mysql_role: Add the argument
subtract_privs(boolean, default false, mutually exclusive withappend_privs). If set, the privileges given inprivare revoked and existing privileges are kept (ansible-collections/ansible.mysql#333).
- mysql_user - fix missing dynamic privileges after revoke and grant privileges to user (ansible-collections/ansible.mysql#120).
- mysql_user - fix parsing privs when a user has roles assigned (ansible-collections/ansible.mysql#231).
This is the patch release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.1.2.
- mysql_replication - fails when using the primary_use_gtid option with slave_pos or replica_pos (ansible-collections/ansible.mysql#335).
- mysql_role - remove redundant connection closing (ansible-collections/ansible.mysql#330).
- mysql_user - fix the possibility for a race condition that breaks certain (circular) replication configurations when
DROP USERis executed on multiple nodes in the replica set. AddingIF EXISTSavoids the need to usesql_log_bin: nomaking the statement always replication safe (ansible-collections/ansible.mysql#287).
This is the patch release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.1.1.
- Collection core functions - fixes related to the mysqlclient Python connector (ansible-collections/ansible.mysql#292).
This is the patch release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.1.0.
- mysql_role - make the
set_default_role_allparameter actually working (ansible-collections/ansible.mysql#282).
This is the minor release of the ansible.mysql collection.
This changelog contains all changes to the modules in this collection
that have been added after the release of ansible.mysql 3.0.0.
- Added explicit description of the supported versions of databases and connectors. Changes to the collection are NOT tested against database versions older than mysql 5.7.31 and mariadb 10.2.37 or connector versions older than pymysql 0.7.10 and mysqlclient 2.0.1. (ansible-collections/ansible.mysql#141)
- mysql_user - added the
force_contextboolean option to set the default database context for the queries to be themysqldatabase. This way replication/binlog filters can catch the statements (ansible-collections/ansible.mysql#265).
- Collection core functions - use vendored version of
distutils.versioninstead of the deprecated Python standard librarydistutils(ansible-collections/ansible.mysql#269).
This is the major release of the ansible.mysql collection.
This changelog contains all breaking changes to the modules in this collection
that have been added after the release of ansible.mysql 2.3.2.
- mysql_replication - remove
Is_SlaveandIs_Masterreturn values (were replaced withIs_PrimaryandIs_Replica(ansible-collections/ansible.mysql#145). - mysql_replication - remove the mode options values containing
master/slaveand the master_use_gtid optionslave_pos(were replaced with correspondingprimary/replicavalues) (ansible-collections/ansible.mysql#145). - mysql_user - remove support for the REQUIRESSL special privilege as it has ben superseded by the tls_requires option (ansible-collections/ansible.mysql#121).
- mysql_user - validate privileges using database engine directly (ansible-collections/ansible.mysql#234 ansible-collections/ansible.mysql#243). Do not validate privileges in this module anymore.