fix(users.yml): replace deprecated 'authorized_key' with 'ansible.posix.authorized_key' for improved compatibility
This commit is contained in:
@@ -59,7 +59,7 @@
|
|||||||
- users-exists
|
- users-exists
|
||||||
|
|
||||||
- name: (users.yml) Ensure authorized_key files for default users are present
|
- name: (users.yml) Ensure authorized_key files for default users are present
|
||||||
authorized_key:
|
ansible.posix.authorized_key:
|
||||||
user: "{{ item.0.name }}"
|
user: "{{ item.0.name }}"
|
||||||
key: "{{ item.1 }}"
|
key: "{{ item.1 }}"
|
||||||
state: present
|
state: present
|
||||||
@@ -106,7 +106,7 @@
|
|||||||
- users-exists
|
- users-exists
|
||||||
|
|
||||||
- name: (users.yml) Ensure authorized_key files for extra users are present
|
- name: (users.yml) Ensure authorized_key files for extra users are present
|
||||||
authorized_key:
|
ansible.posix.authorized_key:
|
||||||
user: "{{ item.0.name }}"
|
user: "{{ item.0.name }}"
|
||||||
key: "{{ item.1 }}"
|
key: "{{ item.1 }}"
|
||||||
state: present
|
state: present
|
||||||
@@ -120,7 +120,7 @@
|
|||||||
- authorized_key
|
- authorized_key
|
||||||
|
|
||||||
- name: (users.yml) other entries authorized_key files
|
- name: (users.yml) other entries authorized_key files
|
||||||
authorized_key:
|
ansible.posix.authorized_key:
|
||||||
user: "{{ item.user }}"
|
user: "{{ item.user }}"
|
||||||
key: "{{ item.key }}"
|
key: "{{ item.key }}"
|
||||||
state: present
|
state: present
|
||||||
@@ -168,7 +168,7 @@
|
|||||||
# - Take care backup host has rsa key to connect via ssh to the other hosts
|
# - Take care backup host has rsa key to connect via ssh to the other hosts
|
||||||
# ---
|
# ---
|
||||||
|
|
||||||
#- name: (users.yml) Copy ssh rsa private key to user root on backup server
|
# - name: (users.yml) Copy ssh rsa private key to user root on backup server
|
||||||
# copy:
|
# copy:
|
||||||
# src: '{{ item.priv_key_src }}'
|
# src: '{{ item.priv_key_src }}'
|
||||||
# dest: '{{ item.priv_key_dest }}'
|
# dest: '{{ item.priv_key_dest }}'
|
||||||
@@ -178,7 +178,7 @@
|
|||||||
# loop: "{{ ssh_keypair_backup_server }}"
|
# loop: "{{ ssh_keypair_backup_server }}"
|
||||||
# loop_control:
|
# loop_control:
|
||||||
# label: '{{ item.priv_key_dest }}'
|
# label: '{{ item.priv_key_dest }}'
|
||||||
# when:
|
# when:
|
||||||
# - insert_ssh_keypair_backup_server|bool
|
# - insert_ssh_keypair_backup_server|bool
|
||||||
# - ssh_keypair_backup_server is defined
|
# - ssh_keypair_backup_server is defined
|
||||||
# - ssh_keypair_backup_server|length > 0
|
# - ssh_keypair_backup_server|length > 0
|
||||||
@@ -187,7 +187,7 @@
|
|||||||
# - keypair-backup-server
|
# - keypair-backup-server
|
||||||
#
|
#
|
||||||
#
|
#
|
||||||
#- name: (users.yml) Copy ssh rsa public key to user root on backup server
|
# - name: (users.yml) Copy ssh rsa public key to user root on backup server
|
||||||
# copy:
|
# copy:
|
||||||
# src: '{{ item.pub_key_src }}'
|
# src: '{{ item.pub_key_src }}'
|
||||||
# dest: '{{ item.pub_key_dest }}'
|
# dest: '{{ item.pub_key_dest }}'
|
||||||
@@ -203,10 +203,10 @@
|
|||||||
# - ssh_keypair_backup_server|length > 0
|
# - ssh_keypair_backup_server|length > 0
|
||||||
# tags:
|
# tags:
|
||||||
# - insert-ssh-keypair-backup-server
|
# - insert-ssh-keypair-backup-server
|
||||||
#- keypair-backup-server
|
# - keypair-backup-server
|
||||||
#
|
#
|
||||||
#
|
#
|
||||||
#- name: (users.yml) Ensure user back has public rsa key of backup server
|
# - name: (users.yml) Ensure user back has public rsa key of backup server
|
||||||
# authorized_key:
|
# authorized_key:
|
||||||
# user: "{{ item.backup_user }}"
|
# user: "{{ item.backup_user }}"
|
||||||
# key: "{{ lookup('file', item.pub_key_src) }}"
|
# key: "{{ lookup('file', item.pub_key_src) }}"
|
||||||
@@ -214,7 +214,7 @@
|
|||||||
# loop: "{{ ssh_keypair_backup_server }}"
|
# loop: "{{ ssh_keypair_backup_server }}"
|
||||||
# loop_control:
|
# loop_control:
|
||||||
# label: 'authorized_keys - user: {{ item.backup_user }}'
|
# label: 'authorized_keys - user: {{ item.backup_user }}'
|
||||||
# when:
|
# when:
|
||||||
# - ssh_keypair_backup_server is defined
|
# - ssh_keypair_backup_server is defined
|
||||||
# - ssh_keypair_backup_server|length > 0
|
# - ssh_keypair_backup_server|length > 0
|
||||||
# tags:
|
# tags:
|
||||||
@@ -229,6 +229,9 @@
|
|||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: /root/.ssh
|
path: /root/.ssh
|
||||||
state: directory
|
state: directory
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: "0700"
|
||||||
|
|
||||||
- name: (users.yml) Copy (backup) ed25519 ssh private key to user root
|
- name: (users.yml) Copy (backup) ed25519 ssh private key to user root
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
@@ -265,7 +268,7 @@
|
|||||||
- insert_ssh_keypair_backup_server
|
- insert_ssh_keypair_backup_server
|
||||||
|
|
||||||
- name: (users.yml) Ensure authorized_key (root) on backup hosts contains public key
|
- name: (users.yml) Ensure authorized_key (root) on backup hosts contains public key
|
||||||
authorized_key:
|
ansible.posix.authorized_key:
|
||||||
user: root
|
user: root
|
||||||
key: "{{ lookup('file', item.pub_key_src) }}"
|
key: "{{ lookup('file', item.pub_key_src) }}"
|
||||||
state: present
|
state: present
|
||||||
|
|||||||
Reference in New Issue
Block a user