Add clarification for RDS with regard to (NO)SUPERUSER attributes (#261…

…) (#262) * Update README.md to remove Ansible 2.9 & 2.10 * Update version.py comment to remove references to Ansible version 2.9 & 2.10 * Update changelog * Updated to include feedback from @Andersson007i * Add note concerning RDS and the `(NO)SUPERUSER` attribute. (cherry picked from commit 05eda3a) Co-authored-by: Jim Chanco Jr <[email protected]>
ansible-collections · May 9, 2022 · fba2e10 · fba2e10
1 parent 5ea18e5
commit fba2e10
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/plugins/modules/postgresql_user.py b/plugins/modules/postgresql_user.py
@@ -168,6 +168,9 @@
   the current and desired C(password). In this case, the module assumes that the passwords are
   different and changes it reporting that the state has been changed.
   To skip all password related checks for existing users, use I(no_password_changes=yes).
+- On some systems (such as AWS RDS), C(SUPERUSER) is unavailable. This means the C(SUPERUSER) and
+  C(NOSUPERUSER) I(role_attr_flags) should not be specified to preserve idempotency and avoid
+  InsufficientPrivilege errors.
 - Supports ``check_mode``.
 seealso:
 - module: community.postgresql.postgresql_privs