Code Review
/
csit.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
Infra: AWS Jenkins Integration
[csit.git]
/
fdio.infra.ansible
/
roles
/
user_add
/
tasks
/
main.yaml
diff --git
a/fdio.infra.ansible/roles/user_add/tasks/main.yaml
b/fdio.infra.ansible/roles/user_add/tasks/main.yaml
index
f980aff
..
24be30d
100644
(file)
--- a/
fdio.infra.ansible/roles/user_add/tasks/main.yaml
+++ b/
fdio.infra.ansible/roles/user_add/tasks/main.yaml
@@
-22,27
+22,18
@@
with_subelements:
- "{{ users }}"
- ssh_key
with_subelements:
- "{{ users }}"
- ssh_key
- - skip_missing:
yes
+ - skip_missing:
true
tags:
- user-add-conf
tags:
- user-add-conf
-- name: Conf -
Allow
Password Login
+- name: Conf -
Disable
Password Login
lineinfile:
dest: "/etc/ssh/sshd_config"
lineinfile:
dest: "/etc/ssh/sshd_config"
- regexp: "^PasswordAuthentication
no
"
- line: "PasswordAuthentication
yes
"
+ regexp: "^PasswordAuthentication
yes
"
+ line: "PasswordAuthentication
no
"
notify:
- "Restart SSHd"
notify:
- "Restart SSHd"
+ when:
+ - sshd_disable_password_login
tags:
- user-add-conf
tags:
- user-add-conf
-
-- name: Conf - Add Visudo Entry
- lineinfile:
- dest: "/etc/sudoers"
- state: present
- line: "{{ item.username }} ALL=(ALL) NOPASSWD: ALL"
- validate: "visudo -cf %s"
- with_items: "{{ users }}"
- tags:
- - user-add-conf
-