mirror of
https://github.com/Expand-sys/kubernetes-rocky9
synced 2025-12-16 23:52:14 +11:00
17 lines
506 B
YAML
17 lines
506 B
YAML
- hosts: 'workers, masters'
|
|
become: yes
|
|
|
|
tasks:
|
|
- name: create the kube user account
|
|
user: name=kube append=yes state=present createhome=yes shell=/bin/bash
|
|
|
|
- name: allow 'kube' to use sudo without needing a password
|
|
lineinfile:
|
|
dest: /etc/sudoers
|
|
line: 'kube ALL=(ALL) NOPASSWD: ALL'
|
|
validate: 'visudo -cf %s'
|
|
|
|
- name: set up authorized keys for the kube user
|
|
authorized_key: user=kube key="{{item}}"
|
|
with_file:
|
|
- ~/.ssh/id_rsa.pub
|