kubespray/roles/adduser/defaults/main.yml

---
kube_owner: kube
kube_cert_group: kube-cert
etcd_data_dir: "/var/lib/etcd"

addusers:
  etcd:
    name: etcd
    comment: "Etcd user"
    create_home: no
    system: yes
    shell: /sbin/nologin
  kube:
    name: kube
    comment: "Kubernetes user"
    create_home: no
    system: yes
    shell: /sbin/nologin
    group: "{{ kube_cert_group }}"

adduser:
  name: "{{ user.name }}"
  group: "{{ user.name | default(None) }}"
  comment: "{{ user.comment | default(None) }}"
  shell: "{{ user.shell | default(None) }}"
  system: "{{ user.system | default(None) }}"
  create_home: "{{ user.create_home | default(None) }}"
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-23 06:25:52 +08:00			`---`
feat: make kubernetes owner parametrized (#8952) * feat: make kubernetes owner parametrized * docs: update hardening guide with configuration for CIS 1.1.19 * fix: set etcd data directory permissions to be compliant to CIS 1.1.12 2022-06-17 16:34:32 +08:00			`kube_owner: kube`
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru> 2016-12-27 23:39:00 +08:00			`kube_cert_group: kube-cert`
Make etcd data dir configurable. Closes: #1073 Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com> 2017-02-24 22:58:54 +08:00			`etcd_data_dir: "/var/lib/etcd"`
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru> 2016-12-27 23:39:00 +08:00
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-23 06:25:52 +08:00			`addusers:`
			`etcd:`
Revert "Drop linux capabilities and rework users/groups" 2017-02-06 20:58:54 +08:00			`name: etcd`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-23 06:25:52 +08:00			`comment: "Etcd user"`
replace createhome (#9314) 2022-09-23 15:26:39 +08:00			`create_home: no`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-23 06:25:52 +08:00			`system: yes`
Fix nologin wrong path (#6272) 2020-06-16 17:30:04 +08:00			`shell: /sbin/nologin`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-23 06:25:52 +08:00			`kube:`
Revert "Drop linux capabilities and rework users/groups" 2017-02-06 20:58:54 +08:00			`name: kube`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-23 06:25:52 +08:00			`comment: "Kubernetes user"`
replace createhome (#9314) 2022-09-23 15:26:39 +08:00			`create_home: no`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-23 06:25:52 +08:00			`system: yes`
Fix nologin wrong path (#6272) 2020-06-16 17:30:04 +08:00			`shell: /sbin/nologin`
Revert "Drop linux capabilities and rework users/groups" 2017-02-06 20:58:54 +08:00			`group: "{{ kube_cert_group }}"`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-23 06:25:52 +08:00
			`adduser:`
			`name: "{{ user.name }}"`
project: fix var-spacing ansible rule (#10266) * project: fix var-spacing ansible rule Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing on the beginning/end of jinja template Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing of default filter Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix spacing between filter arguments Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix double space at beginning/end of jinja Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: fix remaining jinja[spacing] ansible-lint warning Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> 2023-07-05 11:36:54 +08:00			`group: "{{ user.name \| default(None) }}"`
			`comment: "{{ user.comment \| default(None) }}"`
			`shell: "{{ user.shell \| default(None) }}"`
			`system: "{{ user.system \| default(None) }}"`
			`create_home: "{{ user.create_home \| default(None) }}"`