diff --git a/roles/mariadb/scripts/initialize_db.sh b/roles/mariadb/scripts/initialize_db.sh
new file mode 100644
index 0000000..2553e75
--- /dev/null
+++ b/roles/mariadb/scripts/initialize_db.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+mysql -uroot -pgeheim --host 127.0.0.1 << EOF
+CREATE DATABASE IF NOT EXISTS KEYSTONE;
+GRANT ALL PRIVILEGES ON KEYSTONE.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';
+GRANT ALL PRIVILEGES ON KEYSTONE.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';
+EOF
diff --git a/roles/mariadb/tasks/main.yml b/roles/mariadb/tasks/main.yml
index 7ad4035..578a3d3 100644
--- a/roles/mariadb/tasks/main.yml
+++ b/roles/mariadb/tasks/main.yml
@@ -14,8 +14,5 @@
   systemd:
     name: mysql.service
     state: started
-- name: create keystone db and credentials.
-  command: echo "create database if not exists keystone; \n
-                 GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone'; \n
-                 GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone'" \
-                 | mysql -uroot -pgeheim --host 127.0.0.1
+- name: Initialize db
+  script: scripts/initialize_db.sh