feat: fix users loop

This commit is contained in:
Simon Cornet 2025-07-14 15:01:39 +02:00
commit 3468418f94
2 changed files with 60 additions and 66 deletions

View file

@ -180,6 +180,9 @@
- name: "user - create users" - name: "user - create users"
ansible.builtin.include_tasks: "user.yaml" ansible.builtin.include_tasks: "user.yaml"
tags: "usermanagement" tags: "usermanagement"
loop: "{{ users }}"
loop_control:
loop_var: "__user"
# firewall # firewall
- name: "firewall" - name: "firewall"

View file

@ -1,24 +1,15 @@
--- ---
# manage users # manage facts
- name: "manage users" - name: "user - set default facts for {{ __user['username'] }}"
tags: "usermanagement"
loop: "{{ user }}"
loop_control:
loop_var: "__user"
block:
# manage facts
- name: "user - set default facts for {{ __user['username'] }}"
ansible.builtin.set_fact: ansible.builtin.set_fact:
sudo_hosts: "{{ __user['hosts'] | default('all') }}" sudo_hosts: "{{ __user['hosts'] | default('all') }}"
sudo_file: "{{ __user['sudo'] | default('False') }}" sudo_file: "{{ __user['sudo'] | default('False') }}"
sudo_pwless: "{{ __user['sudo_passwordless'] | default('False') }}" sudo_pwless: "{{ __user['sudo_passwordless'] | default('False') }}"
user_state: "{{ __user['state'] | default('present') }}" user_state: "{{ __user['state'] | default('present') }}"
# create user with password # create user with password
- name: "user - create users with password - {{ __user['username'] }}" - name: "user - create users with password - {{ __user['username'] }}"
ansible.builtin.user: ansible.builtin.user:
name: "{{ __user['username'] }}" name: "{{ __user['username'] }}"
comment: "{{ __user['name'] }}" comment: "{{ __user['name'] }}"
@ -29,8 +20,8 @@
- "__user['password'] is defined" - "__user['password'] is defined"
- "user_state == 'present'" - "user_state == 'present'"
# create user without password # create user without password
- name: "user - create users without password - {{ __user['username'] }}" - name: "user - create users without password - {{ __user['username'] }}"
ansible.builtin.user: ansible.builtin.user:
name: "{{ __user['username'] }}" name: "{{ __user['username'] }}"
comment: "{{ __user['name'] }}" comment: "{{ __user['name'] }}"
@ -40,8 +31,8 @@
- "__user['password'] is not defined" - "__user['password'] is not defined"
- "user_state == 'present'" - "user_state == 'present'"
# manage authorized_keys # manage authorized_keys
- name: "user - manage authorized_keys - {{ __user['username'] }}" - name: "user - manage authorized_keys - {{ __user['username'] }}"
ansible.posix.authorized_key: ansible.posix.authorized_key:
user: "{{ __user['username'] }}" user: "{{ __user['username'] }}"
key: "{{ __user['publickey'] }}" key: "{{ __user['publickey'] }}"
@ -49,16 +40,16 @@
manage_dir: "true" manage_dir: "true"
when: "__user['publickey'] is defined" when: "__user['publickey'] is defined"
# delete users # delete users
- name: "user - delete users - {{ __user['username'] }}" - name: "user - delete users - {{ __user['username'] }}"
ansible.builtin.user: ansible.builtin.user:
name: "{{ __user['username'] }}" name: "{{ __user['username'] }}"
state: "absent" state: "absent"
remove: true remove: true
when: "user_state == 'absent'" when: "user_state == 'absent'"
# manage sudoers file # manage sudoers file
- name: "user - create sudoers file - {{ __user['username'] }}" - name: "user - create sudoers file - {{ __user['username'] }}"
ansible.builtin.template: ansible.builtin.template:
src: "templates/usermanagement/sudoers.d/sudoers.j2" src: "templates/usermanagement/sudoers.d/sudoers.j2"
dest: "/etc/sudoers.d/{{ __user['username'] }}" dest: "/etc/sudoers.d/{{ __user['username'] }}"
@ -67,7 +58,7 @@
mode: "0644" mode: "0644"
when: "sudo_file" when: "sudo_file"
- name: "user - delete sudoers file - {{ __user['username'] }}" - name: "user - delete sudoers file - {{ __user['username'] }}"
ansible.builtin.file: ansible.builtin.file:
state: "absent" state: "absent"
path: "/etc/sudoers.d/{{ __user['username'] }}" path: "/etc/sudoers.d/{{ __user['username'] }}"