Merge pull request #12 from madflojo/master
Cleaned up Documentation and User state
This commit is contained in:
commit
43eef81f77
@ -1,11 +1,27 @@
|
|||||||
users:
|
users:
|
||||||
|
## Minimal required pillar values
|
||||||
auser:
|
auser:
|
||||||
sudouser: True
|
|
||||||
shell: /bin/zsh
|
|
||||||
groups:
|
groups:
|
||||||
- admin
|
- admin
|
||||||
|
|
||||||
|
## Full list of pillar values
|
||||||
|
buser:
|
||||||
|
fullname: B User
|
||||||
|
sudouser: True
|
||||||
|
sudo_rules:
|
||||||
|
- buser ALL=(root) /usr/bin/find
|
||||||
|
- buser ALL=(otheruser) /usr/bin/script.sh
|
||||||
|
shell: /bin/bash
|
||||||
|
prime_group:
|
||||||
|
name: primarygroup
|
||||||
|
gid: 500
|
||||||
|
groups:
|
||||||
|
- users
|
||||||
|
ssh_keys:
|
||||||
|
privkey: PRIVATEKEY
|
||||||
|
pubkey: PUBLICKEY
|
||||||
ssh_auth:
|
ssh_auth:
|
||||||
- ssh-rsa PUBLICKEYKEYKEY
|
- ssh-rsa: PUBLICKEYKEYKEY
|
||||||
|
|
||||||
absent_users:
|
absent_users:
|
||||||
- donald
|
- donald
|
||||||
|
@ -76,14 +76,14 @@ user_keydir_{{ name }}:
|
|||||||
- group: {{ group }}
|
- group: {{ group }}
|
||||||
{%- endfor %}
|
{%- endfor %}
|
||||||
|
|
||||||
{% if 'privkey' in user %}
|
{% if 'ssh_keys' in user %}
|
||||||
user_{{ name }}_private_key:
|
user_{{ name }}_private_key:
|
||||||
file.managed:
|
file.managed:
|
||||||
- name: {{ user.get('home', '/home/{0}'.format(name)) }}/.ssh/id_rsa
|
- name: {{ user.get('home', '/home/{0}'.format(name)) }}/.ssh/id_rsa
|
||||||
- user: {{ name }}
|
- user: {{ name }}
|
||||||
- group: {{ user_group }}
|
- group: {{ user_group }}
|
||||||
- mode: 600
|
- mode: 600
|
||||||
- source: salt://keys/{{ user['privkey'] }}
|
- contents: {{ user['ssh_keys']['privkey'] }}
|
||||||
- require:
|
- require:
|
||||||
- user: {{ name }}_user
|
- user: {{ name }}_user
|
||||||
{% for group in user.get('groups', []) %}
|
{% for group in user.get('groups', []) %}
|
||||||
@ -93,9 +93,9 @@ user_{{ name }}_public_key:
|
|||||||
file.managed:
|
file.managed:
|
||||||
- name: {{ user.get('home', '/home/{0}'.format(name)) }}/.ssh/id_rsa.pub
|
- name: {{ user.get('home', '/home/{0}'.format(name)) }}/.ssh/id_rsa.pub
|
||||||
- user: {{ name }}
|
- user: {{ name }}
|
||||||
- group: {{ name }}
|
- group: {{ user_group }}
|
||||||
- mode: 644
|
- mode: 644
|
||||||
- source: salt://keys/{{ user['privkey'] }}.pub
|
- contents: {{ user['ssh_keys']['pubkey'] }}
|
||||||
- require:
|
- require:
|
||||||
- user: {{ name }}_user
|
- user: {{ name }}_user
|
||||||
{% for group in user.get('groups', []) %}
|
{% for group in user.get('groups', []) %}
|
||||||
@ -127,7 +127,9 @@ sudoer-{{ name }}:
|
|||||||
/etc/sudoers.d/{{ name }}:
|
/etc/sudoers.d/{{ name }}:
|
||||||
file.append:
|
file.append:
|
||||||
- text:
|
- text:
|
||||||
- "{{ name }} ALL=(ALL) NOPASSWD: ALL"
|
{% for rule in user.get('sudo_rules', []) %}
|
||||||
|
- {{ rule }}
|
||||||
|
{% endfor %}
|
||||||
- require:
|
- require:
|
||||||
- file: sudoer-defaults
|
- file: sudoer-defaults
|
||||||
- file: sudoer-{{ name }}
|
- file: sudoer-{{ name }}
|
||||||
|
Loading…
Reference in New Issue
Block a user