55 lines
1.7 KiB
Plaintext
55 lines
1.7 KiB
Plaintext
{%- macro print_name(identifier, key) -%}
|
|
{%- if 'name' in key %}
|
|
{{ key['name'] }}
|
|
{%- else %}
|
|
{{ identifier }}
|
|
{%- endif %}
|
|
{%- endmacro -%}
|
|
|
|
{%- macro print_ssh_auth(identifier, key) -%}
|
|
{%- if 'user' in key %}
|
|
- user: {{ key['user'] }}
|
|
{%- else %}
|
|
- user: {{ identifier }}
|
|
{%- endif %}
|
|
{%- if 'present' in key and key['present'] and 'source' in key %}
|
|
- source: {{ key['source'] }}
|
|
{%- else %}
|
|
{%- if 'enc' in key %}
|
|
- enc: {{ key['enc'] }}
|
|
{%- endif -%}
|
|
{%- if 'comment' in key %}
|
|
- comment: {{ key['comment'] }}
|
|
{%- endif -%}
|
|
{%- if 'options' in key %}
|
|
- options: {{ key['options'] }}
|
|
{%- endif -%}
|
|
{%- endif %}
|
|
{%- endmacro -%}
|
|
|
|
include:
|
|
- openssh
|
|
{%- from "openssh/map.jinja" import openssh with context -%}
|
|
{%- set openssh_pillar = pillar.get('openssh', {}) -%}
|
|
{%- set auth = openssh_pillar.get('auth', {}) -%}
|
|
{%- for identifier,keys in auth.items() -%}
|
|
{%- for key in keys -%}
|
|
{% if 'present' in key and key['present'] %}
|
|
{{ print_name(identifier, key) }}:
|
|
ssh_auth.present:
|
|
{{ print_ssh_auth(identifier, key) }}
|
|
{%- if 'sshd_config' in pillar and 'AuthorizedKeysFile' in pillar['sshd_config'] %}
|
|
- config: '{{ pillar['sshd_config']['AuthorizedKeysFile'] }}'
|
|
{% endif -%}
|
|
- require:
|
|
- service: {{ openssh.service }}
|
|
{%- else %}
|
|
{{ print_name(identifier, key) }}:
|
|
ssh_auth.absent:
|
|
{{ print_ssh_auth(identifier, key) }}
|
|
{%- if 'sshd_config' in pillar and 'AuthorizedKeysFile' in pillar['sshd_config'] %}
|
|
- config: '{{ pillar['sshd_config']['AuthorizedKeysFile'] }}'
|
|
{% endif -%}
|
|
{%- endif -%}
|
|
{%- endfor -%}
|
|
{%- endfor -%} |