Support extra authorised SSH keys on the Ansible control host

Author: markgoddard

ansible/deploy-openstack-config.yml

@@ -225,6 +225,12 @@
         dest: "{{ ansible_env.HOME }}/.ssh/id_rsa"
         mode: "0600"
 
+    - name: Ensure additional public keys are authorised
+      ansible.posix.authorized_key:
+        user: "{{ ansible_user }}"
+        key: "{{ item }}"
+      loop: "{{ extra_ssh_public_keys }}"
+
     - name: Ensure OpenStack Config repository is present
       ansible.builtin.git:
         repo: "{{ openstack_config_repo }}"

ansible/vars/defaults.yml

@@ -29,6 +29,9 @@ vault_password_path: "~/vault.password"
 
 ssh_key_path:
 
+# A list of additional SSH public keys to authorise on the Ansible control host.
+extra_ssh_public_keys: []
+
 ansible_ssh_private_key_file: "{{ ssh_key_path }}"
 
 vxlan_vni: