feat(ssh)!: configure keys with filename and content
Accept SSH key content directly so callers no longer need role-specific source directories. Update Molecule coverage and documentation. BREAKING CHANGE: private_keys entries must be objects with filename and content instead of file names. authorized_keys entries must provide content alongside filename. Public keys are also written to ~/.ssh. Co-authored-by: Copilot <copilot@github.com>
This commit is contained in:
6 files changed
+87
-32
No files matched your search
+20
-15
@@ -8,21 +8,26 @@ unix_groups: {}
|
||||
# gid: 1001
|
||||
# state: absent
|
||||
|
||||
unix_users: {}
|
||||
# alice:
|
||||
# state: "present"
|
||||
# name: "Alice"
|
||||
# uid: "1000"
|
||||
# ssh:
|
||||
# config:
|
||||
# - Host: "*"
|
||||
# StrictHostKeyChecking: "no"
|
||||
# UserKnownHostFile: /dev/null
|
||||
# authorized_keys:
|
||||
# - filename: alice@alice-pc.pub
|
||||
# # command: "" # optional
|
||||
# private_keys:
|
||||
# - alice@alice-pc.ed25519.key
|
||||
unix_users:
|
||||
alice:
|
||||
state: "present"
|
||||
name: "Alice"
|
||||
uid: "1000"
|
||||
ssh:
|
||||
config:
|
||||
- Host: "*"
|
||||
StrictHostKeyChecking: "no"
|
||||
UserKnownHostFile: /dev/null
|
||||
authorized_keys:
|
||||
- filename: alice@alice-pc.pub
|
||||
content: ssh-ed25519 AAAAC3NzaC... alice
|
||||
# command: "" # optional
|
||||
private_keys:
|
||||
- filename: alice@alice-pc.ed25519.key
|
||||
content: |
|
||||
-----BEGIN OPENSSH PRIVATE KEY-----
|
||||
...
|
||||
-----END OPENSSH PRIVATE KEY-----
|
||||
# home: /home/alice
|
||||
# btrfs: false
|
||||
# netrc:
|
||||
|
||||
Reference in new issue
Block a user