addReleaseManagerUser.yml

# This playbook adds an release-manager user with the given name to the downloads machine.
# It creates a linux user, adds it to release-manager group and puts the ssh key to downloads and jumphosts.
# The Google Authenticator file is only put to the jumphosts.

# The parameters `username` and `path_to_google_auth` are required.
# Usage:
# ansible-playbook addReleaseManagerUser.yml --extra-vars "username=tacocat path_to_google_auth=absolute/path/to/.google_authenticator"

- hosts:
  - jumphost

  become: true
  become_user: root

  pre_tasks:
    - name: Create release-manager group
      group:
        name: release-manager
        state: present

    - name: Create a linux user and add it to release-manager group
      user:
        name: "{{ username }}"
        create_home: yes
        groups: release-manager
        append: yes
        state: present
        shell: /bin/bash

  roles:
    - role: add_ssh_key
      vars:
        username: "{{ username }}"
    - role: add_GA_file
      vars:
        username: "{{ username }}"
        path_to_google_auth: "{{ path_to_google_auth }}"


- hosts:
  - static

  become: true
  become_user: root

  pre_tasks:
    - name: Create release-manager group
      group:
        name: release-manager
        state: present

    - name: Create a linux user and add it to release-manager group
      user:
        name: "{{ username }}"
        create_home: yes
        state: present
        groups: release-manager
        append: yes
        shell: /bin/bash

    - name: Create public_html directory for user
      file:
        state: directory
        dest: "/home/{{ username }}/public_html"
        mode: "755"
        owner: "{{ username }}"
        group: "{{ username }}"

  roles:
    - role: add_ssh_key
      vars:
        username: "{{ username }}"