remove old admin keys - Githubissues

fgci-org / fgci-ansible

:microscope: Collection of the Finnish Grid and Cloud Infrastructure Ansible playbooks

MIT License

54 stars 18 forks source link

remove old admin keys #180

Closed martbhell closed 7 years ago

martbhell commented 7 years ago

We should remove some keys from an old admin in this repo.

ansible-role-users (which manage the extra users and their ssh keys) in use currently in fgci-ansible does not support removing keys.

If we don't want to remove the admin's homedir:

update ansible-role-user version (may require more changes to variables)
- modify group_vars/all/root_keys.yml
- in adminusers list set key_state: "absent" for key/user we want to remove and then run ansible
- in adminusers list set state: "absent" to remove the user and run ansible

If we are OK with removing the admin's homedir:

set state:"absent" and remove: "yes" and run ansible-playbook

martbhell commented 7 years ago

Done in https://github.com/CSC-IT-Center-for-Science/fgci-ansible/commit/69369f4d25a257c57bbedcb2573c9d5205d62299