1
0
Fork 0
mirror of https://github.com/roles-ansible/ansible_collection_users.git synced 2024-08-16 10:29:50 +02:00
ansible_collection_users/roles/user/tasks/user_ansible.yml

40 lines
1.3 KiB
YAML

---
- name: Create group ansible
become: true
ansible.builtin.group:
name: 'ansible'
state: "{{ l3d_users__ansible_user_state | ternary('present', 'absent') }}"
- name: Create user ansible
become: true
ansible.builtin.user:
name: 'ansible'
comment: 'User for ansible to login and perform tasks'
shell: '/bin/bash'
group: 'ansible'
state: "{{ l3d_users__ansible_user_state | ternary('present', 'absent') }}"
system: true
password: "{{ l3d_users__ansible_user_password }}"
create_home: true
- name: Set dedicated SSH keys for User ansible and drop all other keys
become: true
ansible.posix.authorized_key:
user: 'ansible'
state: "{{ l3d_users__ansible_user_state | ternary('present', 'absent') }}"
key: "{{ l3d_users__ansible_ssh_keys }}"
exclusive: true
when: l3d_users__set_ansible_ssh_keys | bool
- name: Add admin keys to user ansible
become: true
ansible.posix.authorized_key:
user: 'ansible'
state: "{{ l3d_users__ansible_user_state | ternary('present', 'absent') }}"
key: "{{ user.pubkeys | default() }}"
exclusive: false
loop: "{{ _l3d_users__merged_users }}"
when: user.admin | default(false) | bool and user.admin_ansible_login | default(true) | bool
loop_control:
label: "user={{ user.name }}"
loop_var: user