Yuvipanda has uploaded a new change for review.
https://gerrit.wikimedia.org/r/257808
Change subject: Revert "Revert "Allow addition of more root keys via hiera""
......................................................................
Revert "Revert "Allow addition of more root keys via hiera""
Let's see if we can get this to work!
This reverts commit 79890ba1a92e2185108fa0b590ba1c48b4f45947.
Change-Id: I138b3bde5e56775b045c170b0f4c649c54c37dac
---
M modules/passwords/manifests/init.pp
R templates/ssh/root-authorized-keys.erb
2 files changed, 11 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/labs/private
refs/changes/08/257808/1
diff --git a/modules/passwords/manifests/init.pp
b/modules/passwords/manifests/init.pp
index ac845a0..0193b52 100644
--- a/modules/passwords/manifests/init.pp
+++ b/modules/passwords/manifests/init.pp
@@ -4,14 +4,22 @@
##################################################
##################################################
-class passwords::root {
+class passwords::root(
+ $extra_keys = undef,
+){
user { 'root':
password => '!',
}
+ if $extra_keys {
+ $flat_extra_keys = join(values($extra_keys), "\n")
+ } else {
+ $flat_extra_keys = ''
+ }
+
ssh::userkey { 'root':
ensure => present,
- source => 'puppet:///private/ssh/root-authorized-keys',
+ content => template('ssh/root-authorized-keys.erb'),
}
}
diff --git a/files/ssh/root-authorized-keys
b/templates/ssh/root-authorized-keys.erb
similarity index 98%
rename from files/ssh/root-authorized-keys
rename to templates/ssh/root-authorized-keys.erb
index 8ee9807..b927288 100644
--- a/files/ssh/root-authorized-keys
+++ b/templates/ssh/root-authorized-keys.erb
@@ -22,3 +22,4 @@
ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAABAQDNsOh6zGdO5A+BrTc9F7wR21vGrM7If5V8vp065cZtLjOSyjCioWYVhvyrRYFzKKhaGfUNDkSGO2sZ331HWXqr2dppSMVEXtbs7qtVtnBAqhKXEo8Z8VfjtpckbPR9qwEVRlv329Dp1g0uloKow8v6kF7NoKHQgCgiO2l/eQncrEXVg3XrgA7xkgYXUakKaSPwS3UuCtnzEh1Uf9pMg5bvujdeMpzqSiXOyxgPVYaPl/YM3MPUg6y9JsuMn8PBVkVmj4coVzHwCjrV3rZDbmpF37Ru0cUTvUqGUyPFdY1fIMd5pyxQe6h87kni3bKby1ES7JNfuVAsGHei9C3khL8R
[email protected]
# Filippo
ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAABAQDt7HkyaZeIe7L8CuWE1+N47+wDT/4cUmEcrPA1xgdA4By/jesf+1oOTvusbIyXFuCssvspgGmwwNMD+PzNF3xAEo+Yn2aqH4OBhRiF0U8jeaJL1EhzKnT8KKG4fOzzerbKFlE5K9LnYhMXp2i6MoAN9xB3Z350dBwqhspf0OKqZ8AGbsc9RdcEr2pBT7RPRlcKXRTrd47keV+PUazpDVSr2MCdmErknROpcBh5IS27DrKHpma3UcNUGIeMsvsV6nyt8Tz2+EMGkd+P+whij0YzlKDkqB2ppoD+gCPAki277wobiocea79fvPm1/Na+tpXJT7gU+YErld4VRvUclyR/
[email protected]
+<%= @flat_extra_keys %>
--
To view, visit https://gerrit.wikimedia.org/r/257808
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I138b3bde5e56775b045c170b0f4c649c54c37dac
Gerrit-PatchSet: 1
Gerrit-Project: labs/private
Gerrit-Branch: master
Gerrit-Owner: Yuvipanda <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
