The sshkeys puppet module creates, shares, and installs SSH keys.
Contrary to other ssh puppet modules, keys are managed locally on each Puppet node and shared via Facter. This requires PuppetDB.
One limitation is that only the default id_rsa
or id_dsa
public key
is shared -- this module is unable to handle multiple keys at this time.
Create a SSH key for a user:
sshkeys::create_key { 'root':
home => '/root',
ssh_keytype => 'dsa',
}
Once created, Facter will expose the public key via the fact sshpubkey_root
.
To allow root@server1
to access root@server2
:
sshkeys::set_authorized_key {'root@server1 to root@server2':
local_user => 'root',
remote_user => 'root@server1',
home => '/root',
}
Now, user1
should have the key1
key pair installed on his account,
and be able to login to the user2
account.
This module requires:
- The dalen/puppetdbquery module
- The
concat
function added to puppetlabs/stdlib in version 4.1.0
This module was lightly based off of Boklm's module. I used this module frequently before changing to a PuppetDB/Facter-based solution. Some of the code was used in my version.