volker.raschekandCopilot
de280ef620
Accept SSH key content directly so callers no longer need role-specific source directories. Update Molecule coverage and documentation. BREAKING CHANGE: private_keys entries must be objects with filename and content instead of file names. authorized_keys entries must provide content alongside filename. Public keys are also written to ~/.ssh. Co-authored-by: Copilot <copilot@github.com>
29 lines
1.0 KiB
Django/Jinja
29 lines
1.0 KiB
Django/Jinja
#jinja2: lstrip_blocks: True
|
|
#
|
|
# {{ ansible_managed }}
|
|
#
|
|
{% for authorized_key in unix_user.value.ssh.authorized_keys %}
|
|
{% set _args = [] %}
|
|
{% if authorized_key.command is defined and authorized_key.command | length > 0 %}
|
|
{% set _args = _args + [ "command=\"" + authorized_key.command + "\"" ] %}
|
|
{% endif %}
|
|
{% if authorized_key.envs is defined %}
|
|
{% set ns = namespace(envs=[]) %}
|
|
{% for environment in authorized_key.envs %}
|
|
{% if environment.key is defined and environment.key | length > 0 and
|
|
environment.value is defined and environment.value | length > 0
|
|
%}
|
|
{% set ns.envs = ns.envs + [ environment.key + "=" + environment.value ] %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
{% if ns.envs | length > 0 %}
|
|
{% set _args = _args + [ "environment=\"" + (ns.envs | join(',')) + "\"" ] %}
|
|
{% endif %}
|
|
{% endif %}
|
|
{% if _args | length > 0 %}
|
|
{{ _args | join(',') }} {{ authorized_key.content | trim }}
|
|
{% else %}
|
|
{{ authorized_key.content | trim }}
|
|
{% endif %}
|
|
{% endfor %}
|