saltstack-formulas/users-formula
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #168 from konstest/master

Browse Source 
Support "salt://path_to_keyname" ssh_key definition in users:"user name":ssh_keys:"privkey|pubkey" pillar data
This commit is contained in:
N 2018-06-12 21:29:58 +01:00 committed by GitHub
commit 839058b851
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pillar.example
View File

@ -57,6 +57,9 @@ users:
ssh_keys: ssh_keys:
privkey: PRIVATEKEY privkey: PRIVATEKEY
pubkey: PUBLICKEY pubkey: PUBLICKEY
# or you can provide path to key on Salt fileserver
privkey: salt://path_to_PRIVATEKEY
pubkey: salt://path_to_PUBLICKEY
# you can provide multiple keys, the keyname is taken as filename # you can provide multiple keys, the keyname is taken as filename
# make sure your public keys suffix is .pub # make sure your public keys suffix is .pub
foobar: PRIVATEKEY foobar: PRIVATEKEY

5
users/init.sls
View File

@ -195,7 +195,12 @@ users_{{ name }}_{{ key_name }}_key:
- mode: 600 - mode: 600
{% endif %} {% endif %}
- show_diff: False - show_diff: False
{%- set key_value = salt['pillar.get']('users:'+name+':ssh_keys:'+_key) %}
{%- if 'salt://' in key_value[:7] %}
- source: {{ key_value }}
{%- else %}
- contents_pillar: users:{{ name }}:ssh_keys:{{ _key }} - contents_pillar: users:{{ name }}:ssh_keys:{{ _key }}
{%- endif %}
- require: - require:
- user: users_{{ name }}_user - user: users_{{ name }}_user
{% for group in user.get('groups', []) %} {% for group in user.get('groups', []) %}