users.yml 800 B

1234567891011121314151617181920212223
  1. - name: create users in webserver
  2. hosts: webservers,database
  3. gather_facts: no
  4. become: true
  5. vars_files:
  6. - secret.yml
  7. - user_list.yml
  8. tasks:
  9. - name: create webserver user
  10. user:
  11. name: "{{ item.username }}"
  12. uid: "{{ item.uid }}"
  13. groups: wheel
  14. password: "{{ user_password | password_hash ('sha512') }}"
  15. update_password: on_create
  16. when: (( item.uid >= 1000) and ( item.uid < 2000) and 'webservers' in group_names) or (( item.uid >= 2000) and ( item.uid < 3000 ) and 'database' in group_names)
  17. loop: "{{ users }}"
  18. - name: ssh keys exists in mngd hosts
  19. authorized_key:
  20. user: "{{ item.username }}"
  21. key: "{{ lookup('file', '/root/.ssh/id_rsa.pub') }}"
  22. state: present
  23. loop: "{{ users }}"