c12s-kubespray/roles/adduser/defaults/main.yml

---
kube_owner: kube
kube_cert_group: kube-cert
etcd_data_dir: "/var/lib/etcd"

addusers:
  etcd:
    name: etcd
    comment: "Etcd user"
    create_home: no
    system: yes
    shell: /sbin/nologin
  kube:
    name: kube
    comment: "Kubernetes user"
    create_home: no
    system: yes
    shell: /sbin/nologin
    group: "{{ kube_cert_group }}"

adduser:
  name: "{{ user.name }}"
  group: "{{ user.name|default(None) }}"
  comment: "{{ user.comment|default(None) }}"
  shell: "{{ user.shell|default(None) }}"
  system: "{{ user.system|default(None) }}"
  create_home: "{{ user.create_home|default(None) }}"
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-22 22:25:52 +00:00			`---`
feat: make kubernetes owner parametrized (#8952) * feat: make kubernetes owner parametrized * docs: update hardening guide with configuration for CIS 1.1.19 * fix: set etcd data directory permissions to be compliant to CIS 1.1.12 2022-06-17 08:34:32 +00:00			`kube_owner: kube`
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru> 2016-12-27 15:39:00 +00:00			`kube_cert_group: kube-cert`
Make etcd data dir configurable. Closes: #1073 Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com> 2017-02-24 14:58:54 +00:00			`etcd_data_dir: "/var/lib/etcd"`
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru> 2016-12-27 15:39:00 +00:00
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-22 22:25:52 +00:00			`addusers:`
			`etcd:`
Revert "Drop linux capabilities and rework users/groups" 2017-02-06 12:58:54 +00:00			`name: etcd`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-22 22:25:52 +00:00			`comment: "Etcd user"`
replace createhome (#9314) 2022-09-23 07:26:39 +00:00			`create_home: no`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-22 22:25:52 +00:00			`system: yes`
Fix nologin wrong path (#6272) 2020-06-16 09:30:04 +00:00			`shell: /sbin/nologin`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-22 22:25:52 +00:00			`kube:`
Revert "Drop linux capabilities and rework users/groups" 2017-02-06 12:58:54 +00:00			`name: kube`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-22 22:25:52 +00:00			`comment: "Kubernetes user"`
replace createhome (#9314) 2022-09-23 07:26:39 +00:00			`create_home: no`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-22 22:25:52 +00:00			`system: yes`
Fix nologin wrong path (#6272) 2020-06-16 09:30:04 +00:00			`shell: /sbin/nologin`
Revert "Drop linux capabilities and rework users/groups" 2017-02-06 12:58:54 +00:00			`group: "{{ kube_cert_group }}"`
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources. 2016-05-22 22:25:52 +00:00
			`adduser:`
			`name: "{{ user.name }}"`
			`group: "{{ user.name\|default(None) }}"`
			`comment: "{{ user.comment\|default(None) }}"`
			`shell: "{{ user.shell\|default(None) }}"`
			`system: "{{ user.system\|default(None) }}"`
replace createhome (#9314) 2022-09-23 07:26:39 +00:00			`create_home: "{{ user.create_home\|default(None) }}"`