ansible-roles/provision_ansible_user
ansible-roles/provision_ansible_user
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

added ssh_keys, thinking of a way to automate unique ssh_key creation with vault storage backend

Browse Source
This commit is contained in:
Bertrand Lanson 2023-03-24 23:40:02 +01:00
parent 3e33013362
commit d2e33bf27f
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
defaults/main.yml
View File

@ -5,4 +5,6 @@ provision_ansible_user_password: supersecretpassword
provision_ansible_user_is_system: true provision_ansible_user_is_system: true
provision_ansible_user_shell: /bin/bash provision_ansible_user_shell: /bin/bash
provision_ansible_user_sudoer: false provision_ansible_user_sudoer: false
provision_ansible_user_ssh_keys: [] provision_ansible_user_ssh_key:
provision_ansible_user_ssh_key_options: ""
provision_ansible_user_ssh_key_exclusive: true

13
tasks/create_user.yml
View File

@ -8,3 +8,16 @@
shell: "{{ provision_ansible_user_shell }}" shell: "{{ provision_ansible_user_shell }}"
system: "{{ provision_ansible_user_is_system }}" system: "{{ provision_ansible_user_is_system }}"
create_home: true create_home: true
- name: "Add user to sudoers"
ansible.builtin.copy:
dest: "/etc/sudoers.d/{{ provision_ansible_user_name }}"
mode: 0640
content: "{{ provision_ansible_user_name }} ALL=(ALL) NOPASSWD: ALL"
- name: "Add key to authorized_keys"
user: "{{ provision_ansible_user_name }}"
key: "{{ provision_ansible_user_ssh_key }}"
comment: "ansible@{{ ansible_hostname }}"
key_options: "{{ provision_ansible_user_ssh_key_options }}"
exclusive: "{{ provision_ansible_user_ssh_key_exclusive }}"