ansible-bootstrap-rocky9/inventory/prod/group_vars/all/users.yml
2026-05-11 19:13:31 +03:00

34 lines
1.6 KiB
YAML

---
# ── Admin groups ───────────────────────────────────────────────────────────────
# Add new users here. Each entry requires:
# username — Linux username
# ssh_key — public SSH key string (optional, but strongly recommended)
#
# To allow a group on a specific host/group, override `users_allowed_admin_groups`
# in the corresponding group_vars/<group>/vars.yml or host_vars/<host>/vars.yml.
users_admin_groups:
super_admin:
- username: mrwho
ssh_key: >-
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlQz8IhTEQ0utmWmwOC7FijieQULbeyXLDkjmYwSyptqj+7u0qyPPStQzN9leIISSKJ1/eJ5UbETTvc1R1Jg1tdTg5xZTMoz0jwruDP73vYIxLdeO4cZvjJIGyzS2PemUM+016uf4DLZ3jmK4hwEi2mF6UX+NYRPNIuPpr96gP1kYb1vrlG7P0cEk7EbGO6Deda3S64L0lDherSqc/Z7cn8nr6iemTdsBfl303vqFgXf/aWijuvVPUSpSiI3fR0NwvX/RW7oDIFls1dVU5CPkcwaX25Fu3voJ6e3lmduW+1s/vL1nMd5ourET+1Std3S75jqzkVsV3R74Xkgq5avn7w==
middle_admin: []
# Example:
# - username: m.ivanov
# ssh_key: "ssh-rsa AAAA..."
junior_admin: []
# Example:
# - username: j.petrov
# ssh_key: "ssh-rsa AAAA..."
# ── Default access policy ──────────────────────────────────────────────────────
# Which admin groups are provisioned on hosts by default.
# Override in group_vars/<os_group>/vars.yml or host_vars/<host>/vars.yml
# to restrict access on specific servers.
users_allowed_admin_groups:
- super_admin
- middle_admin
- junior_admin