0
0
ssh-key-rotation-role/tasks/main.yml
Thomas Nyambati af016b1ec1 ft(ssh): deployment key
- add capability to add seperate deployment key
- add capability to not generate new key
2017-02-22 15:52:01 +03:00

38 lines
940 B
YAML

---
- include: generate_key.yml
when: generate_new_key | default(True)
- name: Ensure that ssh connection key is defined
assert:
that: ssh_connection_key is defined
- name: Set Authorized key(s) to the authorized keys file
become: yes
become_user: root
when: ssh_connection_key is defined
authorized_key:
exclusive: '{{ is_exclusive }}'
user: '{{ ssh_host_user }}'
state: present
path: '{{ authorized_keys_path }}'
manage_dir: '{{ should_manage_dir }}'
key: "{{ ssh_connection_key }}"
- name: copy
when: generate_new_key != true
copy:
content: "{{ ssh_connection_key }}"
dest: "{{ ssh_key_path }}"
- name: Add deployment key
when: ssh_deployment_key is defined
become: yes
become_user: root
authorized_key:
user: '{{ ssh_host_user }}'
state: present
path: '{{ authorized_keys_path }}'
manage_dir: '{{ should_manage_dir }}'
key: "{{ ssh_deployment_key }}"