Hi.
We are using the *puppetlabs/accounts* module to setup user accounts and
SSH keys but finds it lacking.
We are using *Hiera* and have divided users up by role, type of machine and
region/environment. The issue here is that if a user should exist on
multiple groups of machines, but not in others, we *have to repeat the
entire definition;* password, groups, ssh-key, etc. for every "group" of
users. Multiple places to change things.
I had expected it to have two concepts:
- List of account definitions (passwords, ssh-keys, groups, etc)
- List of accounts to be applied to a target (with the possibility to
override properties)
*Definitions*
accounts::users:
joe:
password: '$6......'
sshkeys: - 'ssh-rsa ... j...@corp.com'
sally:
password: '$6......'
sshkeys: - 'ssh-rsa ... sa...@corp.com'
*Declare/Apply*
*(*hieradata/accounts/DBA.yaml)
accounts::user_list:
joe:
sally:
*(*hieradata/accounts/paymentservice.yaml)
accounts::user_list:
joe:
Is this possible?
Is it possible using Hiera?
What am I missing?
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/366bedce-0c3f-43f8-82d2-d7e854057686n%40googlegroups.com.
