Simplify ssh_authorized_key
This commit is contained in:
parent
4c87f6bd1e
commit
f3c0115743
1 changed files with 21 additions and 34 deletions
|
@ -48,45 +48,32 @@ define sshd::ssh_authorized_key(
|
|||
# nothing a user can't already do by writing their own file resources,
|
||||
# we still depend on the filesystem permissions to keep things safe.
|
||||
if $override_builtin {
|
||||
case $options {
|
||||
'absent': {
|
||||
info("not setting any option for ssh_authorized_key: ${name}")
|
||||
$header = "# HEADER: This file is managed by Puppet.\n"
|
||||
|
||||
file { $real_target:
|
||||
ensure => $ensure,
|
||||
content => "${header}${type} ${key}",
|
||||
owner => $real_user,
|
||||
mode => '0600';
|
||||
}
|
||||
}
|
||||
default: {
|
||||
file { $real_target:
|
||||
ensure => $ensure,
|
||||
content => "${header}${options} ${type} ${key}",
|
||||
owner => $real_user,
|
||||
mode => '0600';
|
||||
}
|
||||
}
|
||||
$header = '# HEADER: This file is managed by Puppet.'
|
||||
|
||||
file { $real_target:
|
||||
ensure => $ensure,
|
||||
owner => $real_user,
|
||||
mode => '0600',
|
||||
content => $options ? {
|
||||
'absent' => "${header}\n${type} ${key}",
|
||||
default => "${header}\n${options} ${type} ${key}",
|
||||
},
|
||||
}
|
||||
|
||||
} else {
|
||||
|
||||
ssh_authorized_key{$name:
|
||||
ensure => $ensure,
|
||||
type => $type,
|
||||
key => $key,
|
||||
user => $real_user,
|
||||
target => $real_target,
|
||||
ensure => $ensure,
|
||||
type => $type,
|
||||
key => $key,
|
||||
user => $real_user,
|
||||
target => $real_target,
|
||||
options => $options ? {
|
||||
'absent' => undef,
|
||||
default => $options,
|
||||
},
|
||||
}
|
||||
|
||||
case $options {
|
||||
'absent': {
|
||||
info("not setting any option for ssh_authorized_key: ${name}")
|
||||
}
|
||||
default: {
|
||||
Ssh_authorized_key[$name]{
|
||||
options => $options,
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue