3 ms·
In terms of the problem of removing SSH public keys from authorized_keys, etc we solve that problem by means of Ansible. If a developer leaves the company, he/s
by sgt 6y ago
In terms of the problem of removing SSH public keys from authorized_keys, etc we solve that problem by means of Ansible. If a developer leaves the company, he/she is removed and that Ansible task is applied to all the servers. Works fine too.
- LogicX 6y agoThis. The author presents a different solution which is equally not scalable without automation and suggests you automate his new layer instead of just using ansible to automate handling of ssh keys.
- leetrout 6y agoAnd certificate revocation lists (CRLs) are potentially more brittle in my experience, too. It’s pretty easy to audit a server for a key in a file or a key file on disk.
- b0afc375b5 6y agoHi, I'm new at using ansible. This is the module you're referring to right? https://docs.ansible.com/ansible/latest/collections/ansible/posix/authorized_key_module.html https://docs.ansible.com/ansible/latest/collections/ansible/...
- sgt 6y agoActually we wrote our own, just leveraging built in modules within Ansible, but that one looks good. Give it a shot, and loop through a datasource e.g a variable.