Initial commit
This commit is contained in:
commit
d6704cc251
6
inventories/kubernetes
Normal file
6
inventories/kubernetes
Normal file
@ -0,0 +1,6 @@
|
||||
[masters]
|
||||
KubeMaster ansible_host=192.168.100.2
|
||||
|
||||
[workers]
|
||||
KubeWorker1 ansible_host=192.168.100.3
|
||||
KubeWorker2 ansible_host=192.168.100.4
|
28
playbooks/make_ansible_user.yml
Normal file
28
playbooks/make_ansible_user.yml
Normal file
@ -0,0 +1,28 @@
|
||||
---
|
||||
- hosts: all
|
||||
become: true
|
||||
tasks:
|
||||
- name: Create the ansible user
|
||||
ansible.builtin.user:
|
||||
name: ansible
|
||||
append: true
|
||||
state: present
|
||||
createhome: true
|
||||
shell: /bin/bash
|
||||
|
||||
- name: Make sure the sudoers dropin directory exists
|
||||
ansible.builtin.file:
|
||||
path: "/etc/sudoers.d"
|
||||
state: directory
|
||||
|
||||
- name: Create a sudoers file for the ansible user
|
||||
ansible.builtin.lineinfile:
|
||||
path: "/etc/sudoers.d/50-ansible"
|
||||
line: "ansible ALL=(ALL) NOPASSWD: ALL"
|
||||
validate: "visudo -cf"
|
||||
|
||||
- name: Add authorized key for ansible user
|
||||
ansible.builtin.authorized_key:
|
||||
user: ansible
|
||||
key: "{{ lookup('ansible.builtin.file', '/home/ansible/.ssh/id_rsa.pub') }}"
|
||||
|
Loading…
Reference in New Issue
Block a user