client-pull-installation/roles/init/tasks/init.yml

43 lines
1.1 KiB
YAML

---
# Initialization task (for simpler ansible management)
- name: Setting up sudoers for root
lineinfile:
dest: /etc/sudoers.d/root
regexp: "^root.*NOPASSWD"
line: "root ALL=(ALL:ALL) NOPASSWD:ALL"
owner: root
group: root
mode: 0440
create: yes
state: present
validate: '/usr/sbin/visudo -c -f %s'
- name: Creating Ansible Management User
user:
name: amgmt
comment: "Ansible Management User"
group: users
password: $6$rounds=100000$XvHuMoXtpCksx379$nhlfUn38.oBB7JrDrtwfUisw8T0Bg5InzFq1fw31mcEmGZ2AYFkFK2zC2g04lSfw.kpdSgqH3Dl5q9r1fY6.k.
shell: /bin/bash
state: present
generate_ssh_key: yes
- name: Setting up sudoers for Ansible Management User
lineinfile:
dest: /etc/sudoers.d/amgmt
regexp: "^amgmt.*NOPASSWD"
line: "amgmt ALL=(ALL:ALL) NOPASSWD:ALL"
owner: root
group: root
mode: 0440
create: yes
state: present
validate: '/usr/sbin/visudo -c -f %s'
- name: Authorizing Ansible Management User's key from server
authorized_key:
user: amgmt
key: "{{ lookup('pipe', 'curl -sSL http://' + serverfqdn + ':3000/mgmtkey') }}"
state: present