bugfix: updated ssh key configuration

- + peter.heise
- + gitlabci
- - ansible
- added date suffix to outdated ssh keys
- updating root ssh key is now active per default

patchday.yml

@@ -130,7 +130,7 @@
       when:
         - check_postgres.failed
 
-- hosts: all,!elastic,!postgres,!k8s_cluster,!gw
+- hosts: all,!elastic,!postgres,!k8s_cluster
   serial: 10
   become: yes
   tasks:

roles/common/tasks/main.yml

@@ -33,7 +33,7 @@
     key: "{{ lookup('file', 'users/' + item + '/ssh.pub') }}"
   loop: '{{ smardigo_plattform_users }}'
   tags:
-    - never
+    - users
     - root_authorized_keys
 
 # ansible-lint related hint
@@ -46,7 +46,7 @@
     key: "{{ lookup('file', 'users/outdated/' + item.path) }}"
   with_community.general.filetree: users/outdated/
   tags:
-    - never
+    - users
     - root_authorized_keys
 
 - name: "Read current users" # noqa risky-shell-pipe

setup.yml

@@ -1,7 +1,7 @@
 ---
 
 - name: 'apply setup to {{ host | default("all") }}'
-  hosts: '{{ host | default("all") }},!gw'
+  hosts: '{{ host | default("all") }}'
   serial: "{{ serial_number | default(10) }}"
   strategy: free
   vars:

users/outdated/peter.heise.2022.03.18.pub

@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDPiWNJzb4vqgkjsRjl1C5oTQbyEvsBPfBuVf3AL9Ssw7RJb8hl3VqVegJ1HqNe1/j4R04a53ND5qy93GBAYOI3iNKiWq2Cd9DM9QHN+EiNG7eo0wkr/VhBh5bh6knn12RXX1T0xnR9jeB3rIQWyJyR+PTSEz4oul+QjlKB8uO7LLmsoqVpVqGhj7xtoVIEfJPMCEBMjj/jc3rGK1ezrXBGCTFEQPl5b+XRy9kybv5hf6W02yPm82RRozG3/3zObiNPX/ajt5mHB09CTq5JLeLFlfftpcLEON1CDpzACm7cIvnYoHKltaGjkZaprxpPApkKLiPe8zVUYiG0wt5qYUXS/AQ5u6I0vFA+5H3fEYZMalp4fwf4OWFxqJQH97sivQe/q7SnOA70GiClri9qWt6r6/LP7du7UySvOWVX8R6CuD3OdaAHXng1UWLDwqP9r2XshQIVo90vz9vLVP2k7bBchxignmD7WL4VnEG5bhhf487xhK3+YCG8TWtGO8MXDp0= peter.heise@netgo.de

users/peter.heise/ssh.pub

@@ -1 +1 @@
-ssh-rsa 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 peter.heise@netgo.de
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPsKMA/LoU/tPnxb25MT0NZnbkBPpn3THcVzM/KWLI1g peter.heise@netgo.de