added the first few tasks

defaults/main.yml

@@ -1,2 +1,13 @@
 ---
 # defaults file for provision_management_user
+provision_management_user_name: ansible
+provision_management_user_group: ansible
+provision_management_user_password: "*"
+provision_management_user_is_system: true
+provision_management_user_home: /opt/{{ provision_management_user_name }}
+provision_management_user_shell: /bin/bash
+provision_management_user_sudoer: false
+provision_management_user_add_ssh_key: false
+provision_management_user_ssh_key:
+provision_management_user_ssh_key_options: ""
+provision_management_user_ssh_key_exclusive: true

tasks/add_ssh_keys.yml

@@ -0,0 +1,9 @@
+---
+# task/add_ssh_keys file for provision_ansible_user
+- name: "Add key to authorized_keys"
+  ansible.posix.authorized_key:
+    user: "{{ provision_ansible_user_name }}"
+    key: "{{ provision_ansible_user_ssh_key }}"
+    comment: "{{ provision_ansible_user_name }}@{{ ansible_hostname }}"
+    key_options: "{{ provision_ansible_user_ssh_key_options }}"
+    exclusive: "{{ provision_ansible_user_ssh_key_exclusive }}"

tasks/create_user.yml

@@ -0,0 +1,27 @@
+---
+# task/create_user file for provision_ansible_user
+- name: "Create group {{ provision_ansible_user_group }}"
+  ansible.builtin.group:
+    name: "{{ provision_ansible_user_group }}"
+    state: present
+    system: "{{ provision_ansible_user_is_system }}"
+
+- name: "Create user {{ provision_ansible_user_name }}"
+  ansible.builtin.user:
+    name: "{{ provision_ansible_user_name }}"
+    comment: "Ansible service user"
+    password: "{{ provision_ansible_user_password }}"
+    group: "{{ provision_ansible_user_group }}"
+    home: "{{ provision_ansible_user_home }}"
+    shell: "{{ provision_ansible_user_shell }}"
+    system: "{{ provision_ansible_user_is_system }}"
+    create_home: true
+
+- name: "Add user to sudoers"
+  ansible.builtin.copy:
+    dest: "/etc/sudoers.d/{{ provision_ansible_user_name }}"
+    owner: root
+    group: root
+    mode: 0640
+    content: "{{ provision_ansible_user_name }}  ALL=(ALL)  NOPASSWD: ALL"
+  when: provision_ansible_user_sudoer

tasks/main.yml

@@ -1,2 +1,8 @@
 ---
 # task/main file for provision_management_user
+- name: "Import create_user.yml"
+  ansible.builtin.include_tasks: create_user.yml
+
+- name: "Import add_ssh_keys.yml"
+  ansible.builtin.include_tasks: add_ssh_keys.yml
+  when: provision_ansible_user_add_ssh_key