2021-12-13 19:00:18 +01:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
- name: List all authorized keys directories
|
|
|
|
|
shell: ls -1 /etc/ssh/authorized_keys | xargs -n1 basename
|
|
|
|
|
register: existing_ssh_keys
|
|
|
|
|
changed_when: False
|
2022-01-25 13:00:05 +01:00
|
|
|
failed_when: False # The task can fail if there's no key yet
|
2021-12-13 19:00:18 +01:00
|
|
|
tags: ssh
|
|
|
|
|
|
|
|
|
|
- name: Remove unmanaged ssh keys
|
|
|
|
|
file: path=/etc/ssh/authorized_keys/{{ item }} state=absent
|
|
|
|
|
loop: "{{ existing_ssh_keys.stdout_lines | default([]) }}"
|
|
|
|
|
when: item not in ssh_users | rejectattr('keys_file', 'defined') | map(attribute='name')
|
|
|
|
|
tags: ssh
|
