9296789da9
Allows to generate SSH keys on a managed host or on localhost Change-Id: I29ec62661c3fe280f9f1101ca79985cb9cf5b4cb
91 lines
2.4 KiB
YAML
91 lines
2.4 KiB
YAML
---
|
|
|
|
# --- generate files ---------------------------------------------------------
|
|
|
|
- debug: var=ssh_key_host # , verbosity=2
|
|
|
|
- name: will generate SSH key files on local file '{{ ssh_local_key_file }}'
|
|
when: ssh_key_host == 'localhost'
|
|
set_fact:
|
|
ssh_generate_key_file: '{{ ssh_local_key_file }}'
|
|
cacheable: yes
|
|
|
|
- name: will generate SSH key files on remote file '{{ ssh_key_file }}'
|
|
when: ssh_key_host != 'localhost'
|
|
set_fact:
|
|
ssh_generate_key_file: '{{ ssh_key_file }}'
|
|
cacheable: yes
|
|
|
|
- debug: var=ssh_generate_key_file, verbosity=2
|
|
|
|
- name: generate SSH key files ({{ ssh_key_host }}:{{ ssh_local_key_file }})
|
|
openssh_keypair:
|
|
path: '{{ ssh_generate_key_file }}'
|
|
type: '{{ ssh_key_algorithm }}'
|
|
size: '{{ ssh_key_size }}'
|
|
state: present
|
|
force: false
|
|
delegate_to: '{{ ssh_key_host }}'
|
|
|
|
|
|
# --- read files -------------------------------------------------------------
|
|
|
|
- delegate_to: '{{ ssh_key_host }}'
|
|
block:
|
|
- name: read private SSH key file
|
|
slurp:
|
|
src: '{{ ssh_generate_key_file }}'
|
|
register: ssh_read_private_key
|
|
|
|
- name: read public SSH key file
|
|
slurp:
|
|
src: '{{ ssh_generate_key_file }}.pub'
|
|
register: ssh_read_public_key
|
|
|
|
- name: store SSH key pairs
|
|
set_fact:
|
|
ssh_private_key: '{{ ssh_read_private_key.content | b64decode }}'
|
|
ssh_public_key: '{{ ssh_read_public_key.content | b64decode }}'
|
|
|
|
- debug: var=ssh_private_key, verbosity=2
|
|
- debug: var=ssh_public_key, verbosity=2
|
|
|
|
|
|
# --- write files ------------------------------------------------------------
|
|
|
|
- name: make sure '{{ ssh_key_file | dirname }}' directory exists
|
|
file:
|
|
state: directory
|
|
path: '{{ ssh_key_file | dirname }}'
|
|
mode: 0700
|
|
|
|
- name: write private SSH key file to '{{ ssh_key_file }}'
|
|
copy:
|
|
content: '{{ ssh_private_key }}'
|
|
dest: '{{ ssh_key_file }}'
|
|
owner: '{{ ssh_key_user }}'
|
|
group: '{{ ssh_key_user }}'
|
|
mode: '0600'
|
|
|
|
- name: write public SSH key file to '{{ ssh_key_file }}.pub'
|
|
copy:
|
|
content: '{{ ssh_public_key }}'
|
|
dest: '{{ ssh_key_file }}.pub'
|
|
owner: '{{ ssh_key_user }}'
|
|
group: '{{ ssh_key_user }}'
|
|
mode: '0600'
|
|
|
|
|
|
# --- authorize key ----------------------------------------------------------
|
|
|
|
- name: enable access via key file on all nodes
|
|
authorized_key:
|
|
user: '{{ ssh_key_user }}'
|
|
state: present
|
|
key: "{{ ssh_public_key }}"
|
|
|
|
- name: set facts
|
|
set_fact:
|
|
ssh_key_file: '{{ ssh_key_file }}'
|
|
ssh_key_user: '{{ ssh_key_user }}'
|