#######################################################################################################

:exclamation: DEPRECATION :exclamation:

This repository and the role associated are deprecated in favor of the Manala Ansible Collection

You will find informations on its usage on the collection repository

#######################################################################################################

Ansible Role: Accounts

:exclamation: Report issues and send Pull Requests in the main Ansible Role repository :exclamation:

This role will deal with the setup of users and groups accounts and ssh keys.

It's part of the Manala Ansible stack but can be used as a stand alone component.

Requirements

None.

Dependencies

None.

Installation

Ansible 2+

Using ansible galaxy cli:

ansible-galaxy install manala.accounts

Using ansible galaxy requirements file:

- src: manala.accounts

Role Handlers

None

Role Variables

Defining users

The manala_accounts_userskey will allow to define our users by:

• A user name
• A main group
• Some secondary groups
• Some exclusive authorized keys
• Some private/public keys

Example

manala_accounts_users:
  - user:   foo
    group:  users
    groups: ['sudo']
    authorized_keys_file: authorized_keys2 # authorized_keys by default
    authorized_keys:
      - "{{ query('file', playbook_dir ~ '/files/users/keys/[email protected]') }}"
      - "no-port-forwarding,from=\"10.0.1.*\" {{ query('file', playbook_dir ~ '/files/users/keys/[email protected]') }}"
    keys:
      - name:    id_rsa
        public:  "{{ query('file', playbook_dir ~ '/files/users/keys/[email protected]') }}"
        private: "{{ query('file', playbook_dir ~ '/files/users/keys/[email protected]') }}"
    gpg_keys:
      - key:    FOOOBAAR
        public: "{{ query('file', playbook_dir ~ '/files/users/gpg_keys/[email protected]') }}"
        secret: "{{ query('file', playbook_dir ~ '/files/users/gpg_keys/[email protected]') }}"

Example: Ensure a user is not present

manala_accounts_users:
  - user:   bar
    state:  absent
  # Flatten users
  - "{{ my_custom_users_array }}"

Example: Trust GPG keys

  - user: root
    gpg_keys:
      - key: foobar
        public: "{{ query('file', playbook_dir ~ '/files/foobar.gpg.key') }}"
        trust: true

Creating group

You can create your own group by using the manala_accounts_groups by specifying:

• A group name
• If the group is a "system group"

Example

manala_accounts_groups:
  - group: ops
    system: false
  # Flatten groups
  - "{{ my_custom_groups_array }}"

Example playbook

- hosts: servers
  roles:
    - role: manala.accounts

Licence

MIT

Author information

Manala (http://www.manala.io/)