summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--inventory/group_vars/all/main.yml1
-rw-r--r--roles/admin-user/tasks/main.yml7
2 files changed, 8 insertions, 0 deletions
diff --git a/inventory/group_vars/all/main.yml b/inventory/group_vars/all/main.yml
index 87ecb369..82d81d6e 100644
--- a/inventory/group_vars/all/main.yml
+++ b/inventory/group_vars/all/main.yml
@@ -12,6 +12,7 @@ equinox_user:
name: equinox
# password: "{{ vault_equinox_password }}"
shell: /bin/zsh
+ ssh_keys: "{{ ssh_keys.equinox[env_group] }}"
ssh_keys:
diff --git a/roles/admin-user/tasks/main.yml b/roles/admin-user/tasks/main.yml
index e6fc3572..887da0ab 100644
--- a/roles/admin-user/tasks/main.yml
+++ b/roles/admin-user/tasks/main.yml
@@ -15,3 +15,10 @@
- adm
append: yes
shell: "{{ item.shell | default(omit) }}"
+
+- name: install ssh keys for admin users
+ with_items: "{{ admin_user_group | default([]) | union(admin_user_host | default([])) }}"
+ authorized_key:
+ user: "{{ item.name }}"
+ key: "{{ item.ssh_keys | join('\n') }}"
+ exclusive: yes