fix

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "python-envs.defaultEnvManager": "ms-python.python:system"
+}

inventory/prod/group_vars/all/users.yml

@@ -9,14 +9,14 @@
 
 users_admin_groups:
   super_admin:
-    - username: s.lebed
+    - username: mrwho
-      ssh_key: >-
-        ssh-rsa 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 s.lebed@gigacoms.ru
-
-    - username: a.kazantsev
       # Note: key comment says a.kazantsev — verify the key owner if needed
       ssh_key: >-
-        ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClB+roxcr/POfhJVq3jFIzZD36nRVhfYq9WaQBr6o2RvMHM+B/2yRM8OeN6jhhYYFB8z7X5o8j1/ZC2u/80LLJtEQ0s8DCb4l4Ie7IY3POBYlmwtvlnhNFsGlKoAoQr0jpPUwMiV7wdBtHYCqHJM69+VpWCnqOkI+hrdj5oxSm26g6AKL0lm9AJO8KnbIpUCHgnQ3EcPcfQE7OpspVP6nbp4SwipJbnG4yYeKB6l77ESUdCkgwwLCv4DCpxJ846J9aN39Bu273hmEoO6+Bw0wAPRruLp5/AzPni7frcncdGuPfOmi+RAoOsRqoO/c122soAbQn3074QtEKwuC+zFKH a.kazantsev@gigacoms.ru
+        ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlQz8IhTEQ0utmWmwOC7FijieQULbeyXLDkjmYwSyptqj+7u0qyPPStQzN9leIISSKJ1/eJ5UbETTvc1R1Jg1tdTg5xZTMoz0jwruDP73vYIxLdeO4cZvjJIGyzS2PemUM+016uf4DLZ3jmK4hwEi2mF6UX+NYRPNIuPpr96gP1kYb1vrlG7P0cEk7EbGO6Deda3S64L0lDherSqc/Z7cn8nr6iemTdsBfl303vqFgXf/aWijuvVPUSpSiI3fR0NwvX/RW7oDIFls1dVU5CPkcwaX25Fu3voJ6e3lmduW+1s/vL1nMd5ourET+1Std3S75jqzkVsV3R74Xkgq5avn7w==
+    - username: m.kudryashov
+      ssh_key: >-
+        ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvaPsU1iT306USihvyYYVEdmr2CjLAaSUxyQy1QSEqF
+
 
   middle_admin:
     []

playbooks/deploy_users.yml

@@ -4,8 +4,8 @@
 # Ограничить одной группой хостов:
 #          ansible-playbook -i inventory/prod playbooks/users.yml --limit centos
 - name: Provision admin users
-  hosts: all
+  hosts: vm01
-  gather_facts: true
+  gather_facts: false
   become: true
 
   roles:

playbooks/mrwho/add-user.yml

@@ -0,0 +1,17 @@
+---
+- name: Provision admin users
+  hosts: vm01
+  gather_facts: false
+  become: true
+
+  tasks:
+    - name: Create users
+      ansible.builtin.user:
+        name: m.kudryashov
+        state: present
+
+    - name: Add SSH key
+      ansible.posix.authorized_key:
+        user: m.kudryashov
+        state: present
+        key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvaPsU1iT306USihvyYYVEdmr2CjLAaSUxyQy1QSEqF"

roles/users/tasks/main.yml

@@ -16,18 +16,18 @@
     msg: "Managing users: {{ users_managed_users | map(attribute='username') | list }}"
 
 # ── Необходимые пакеты ────────────────────────────────────────────────────────
-- name: Update apt cache (Debian/Ubuntu)
+#- name: Update apt cache (Debian/Ubuntu)
-  ansible.builtin.apt:
+#  ansible.builtin.apt:
-    update_cache: true
+#    update_cache: true
-    cache_valid_time: 3600
+#    cache_valid_time: 3600
-  when: ansible_os_family == "Debian"
+#  when: ansible_os_family == "Debian"
-  failed_when: false
+#  failed_when: false
 
-- name: Ensure sudo package is present (Debian/Ubuntu)
+#- name: Ensure sudo package is present (Debian/Ubuntu)
-  ansible.builtin.apt:
+#  ansible.builtin.apt:
-    name: sudo
+#    name: sudo
-    state: present
+#    state: present
-  when: ansible_os_family == "Debian"
+#  when: ansible_os_family == "Debian"
 
 # ── Учётные записи пользователей ──────────────────────────────────────────────
 - name: Ensure user accounts exist