Franziska Kunsmann
2d42e5f7dd
All checks were successful
bundlewrap/pipeline/head This commit looks good
46 lines
1 KiB
Python
46 lines
1 KiB
Python
from json import loads
|
|
from os.path import join
|
|
|
|
defaults = {
|
|
'apt': {
|
|
'packages': {
|
|
'tmux': {},
|
|
'vim': {},
|
|
},
|
|
},
|
|
'users': {
|
|
'root': {
|
|
'home': '/root',
|
|
'shell': '/bin/bash',
|
|
'password': repo.vault.human_password_for('root on {}'.format(node.name)),
|
|
},
|
|
},
|
|
}
|
|
|
|
|
|
@metadata_reactor.provides(
|
|
'users',
|
|
)
|
|
def add_users_from_json(metadata):
|
|
with open(join(repo.path, 'users.json'), 'r') as f:
|
|
json = loads(f.read())
|
|
|
|
users = {}
|
|
# First, add all admin users
|
|
for uname, config in json.items():
|
|
if config.get('is_admin', False):
|
|
users[uname] = {
|
|
'ssh_pubkey': set(config['ssh_pubkey']),
|
|
'is_admin': True,
|
|
}
|
|
|
|
# Then, run again to get all 'to be deleted' users
|
|
for uname, config in json.items():
|
|
if uname not in metadata.get('users', {}):
|
|
users.setdefault(uname, {
|
|
'delete': True,
|
|
})
|
|
|
|
return {
|
|
'users': users,
|
|
}
|