Add support for applying ssh_users role to legacy hosts

hellais commented 4 months ago

This PR adds support for applying the ssh_users role to legacy hosts so that we are able to sync access to all legacy hosts with support for passwordless sudo.

It also creates all the users based on the group_vars/all and configures the system so that everybody is able to login with the right permission levels.

There is also support for cleaning up (i.e. removing) stale usernames from the host.

This implements: https://github.com/ooni/devops/issues/72

github-actions[bot] commented 4 months ago

Ansible Run Output 🤖

Ansible Playbook Recap 🔍

Ansible playbook output 📖`success`

Show Execution

``` $ ansible-playbook playbook.yml --check --diff -i ../tf/modules/ansible_inventory/inventories/inventory-dev.ini [WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all' [WARNING]: Could not match supplied host pattern, ignoring: clickhouse_servers [WARNING]: Could not match supplied host pattern, ignoring: monitoring.ooni.org PLAY [ClickHouse servers] ****************************************************** skipping: no hosts matched PLAY [Update monitoring config] ************************************************ skipping: no hosts matched PLAY RECAP ********************************************************************* ```


Pusher	@hellais
Action	pull_request
Working Directory
Workflow	.github/workflows/check_ansible.yml
Last updated	Tue, 09 Jul 2024 08:59:59 GMT

hellais commented 4 months ago

This is deployed. Merging.

ooni / devops