mirror of https://github.com/famedly/ansible-collection-base synced 2024-11-10 06:24:17 +00:00

History

Sammy 4d1fae6b77 fix(user): ignore ssh key errors in check mode In check mode, the task fails if it's supposed to be adding ssh keys to a user who doesn't exist. Ignoring errors in check mode makes it possible to run the task in check mode even if there are new users to be added.		2024-02-02 10:34:16 +01:00
..
defaults	chore(user): fix lints in role	2023-02-21 21:21:49 +01:00
meta	chore(user): fix lints in role	2023-02-21 21:21:49 +01:00
tasks	fix(user): ignore ssh key errors in check mode	2024-02-02 10:34:16 +01:00
templates	feat(user)!: major role refactor allowing easy user deprovisioning	2022-09-01 08:47:23 +02:00
README.md	feat(user)!: major role refactor allowing easy user deprovisioning	2022-09-01 08:47:23 +02:00

README.md

`famedly.base.user` ansible role

This ansible role can be used to provision access to a server via SSH by creating and configuring users and their SSH keys and sudo privileges.

Role Variables

The role takes a dict of users to provision in the users variable in the following structure:

users:
  username:
    root: <bool>  # Whether the user should be given root permissions by the role, default false
    active: <bool>  # Whether the user should be created or removed, default false
    gecos: "Full Name"  # not required
    ssh:  # defaults to an empty array
      - "ssh-ed25519 AAAA[...] comment-here"
      - [...]
  anotheruser: [...]

For more fine grained control of who has root access where and even which users are to be deployed where, a structure like this is recommended in the inventory:

# In group_vars/all
users_base:
  username:
    gecos: "Full Name"
    ssh: [...]

users: >
  {{
    users_base
    | combine(users_group_acl, recursive=True)
    | combine(users_host_acl, recursive=True)
  }}  

# In group_vars/prod

users_group_acl:
  username:
    active: true
    root: true

# In host_vars/weird-edge-case

users_host_acl:
  username:
    root: false

It allows keeping the user information in one central place, and having overrides for specific groups or hosts.

README.md

famedly.base.user ansible role

Role Variables

`famedly.base.user` ansible role