looking on google, this seems to come up a lot.
have users. each user has N ssh keys. sometimes, one of the users keys is 
revoked. for example, a crashed cellphone sent in for repair. 

we keep keys like this
.
├── voxel
│   └── voxel.pub
├── pixel
│   ├── pixelphone3.pub
│   ├── pixel.pub
│   └── revoked
│       └── pixelphone2.pub
└── root
    ├── voxel.pub
    └── pixel.pub


with a single user, this works

---
- hosts: all
  tasks:
  - name: install ssh keys
    authorized_key:
      user=root
      key="{{ lookup('file',item) }}"
    with_fileglob:
      - ssh_keys/root/*
  - name: remove unwanted keys
    authorized_key:
      user=root
      state=absent
      key="{{ lookup('file',item) }}"
    with_fileglob:
      - ssh_keys/root/revoked/*

how can you do that with a list of users?

tried

---
- hosts: multiuser
  tasks:
  - name: install user
    user: name={{ item }} 
    with_items: "{{ users }}"
  - name: install ssh keys
    authorized_key:
      user: "{{ item.0 }}"
      key: "{{ lookup('file',item.1) }}"
    with_nested:
      - "{{ users }}"
      - "{{ lookup('fileglob', 'public_keys/{{ item.0 }}/*').split(',') }}"

but got 

[DEPRECATION WARNING]: Skipping task due to undefined Error, in the future 
this will be a 
fatal error.: 'item' is undefined.
This feature will be removed in a future release. 
Deprecation warnings can be disabled by setting deprecation_warnings=False 
in ansible.cfg.
fatal: [devla]: FAILED! => {"failed": true, "msg": "the field 'args' has an 
invalid value, which appears to include a variable that is undefined. The 
error was: 'item' is undefined\n\nThe error appears to have been in 
'/home/pixel/hivecluster/users.yml': line 7, column 5, but may\nbe 
elsewhere in the file depending on the exact syntax problem.\n\nThe 
offending line appears to be:\n\n    with_items: \"{{ users }}\"\n  - name: 
install ssh keys\n    ^ here\n"}

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/1065b856-fb88-485e-b9f2-9f4a3ac2585d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to