source install script from github

Author: michaelwittig

showcase.yaml

@@ -123,112 +123,7 @@ Resources:
               git: []
           files:
             '/opt/install.sh':
-              content: |
-                #!/bin/bash -e
-
-                show_help() {
-                cat << EOF
-                Usage: ${0##*/} [-hv] [-a ARN] [-i GROUP,GROUP,...] [-l GROUP,GROUP,...] [-s GROUP]
-                Install import_users.sh and authorized_key_commands.
-
-                    -h              display this help and exit
-                    -v              verbose mode.
-
-                    -a arn          Assume a role before contacting AWS IAM to get users and keys.
-                                    This can be used if you define your users in one AWS account, while the EC2
-                                    instance you use this script runs in another.
-                    -i group,group  Which IAM groups have access to this instance
-                                    Comma seperated list of IAM groups. Leave empty for all available IAM users
-                    -l group,group  Give the users these local UNIX groups
-                                    Comma seperated list
-                    -s group,group  Specify IAM group(s) for users who should be given sudo privileges, or leave
-                                    empty to not change sudo access, or give it the value '##ALL##' to have all
-                                    users be given sudo rights.
-                                    Comma seperated list
-
-
-                EOF
-                }
-
-                IAM_GROUPS=""
-                SUDO_GROUPS=""
-                LOCAL_GROUPS=""
-                ASSUME_ROLE=""
-
-                while getopts :hva:i:l:s: opt
-                do
-                    case $opt in
-                        h)
-                            show_help
-                            exit 0
-                            ;;
-                        i)
-                            IAM_GROUPS="$OPTARG"
-                            ;;
-                        s)
-                            SUDO_GROUPS="$OPTARG"
-                            ;;
-                        l)
-                            LOCAL_GROUPS="$OPTARG"
-                            ;;
-                        v)
-                            set -x
-                            ;;
-                        a)
-                            ASSUME_ROLE="$OPTARG"
-                            ;;
-                        \?)
-                            echo "Invalid option: -$OPTARG" >&2
-                            show_help
-                            exit 1
-                            ;;
-                        :)
-                            echo "Option -$OPTARG requires an argument." >&2
-                            show_help
-                            exit 1
-                    esac
-                done
-
-                tmpdir=$(mktemp -d)
-
-                cd "$tmpdir"
-
-                git clone https://github.com/widdix/aws-ec2-ssh.git
-
-                cd "$tmpdir/aws-ec2-ssh"
-
-                cp authorized_keys_command.sh /opt/authorized_keys_command.sh
-                cp import_users.sh /opt/import_users.sh
-
-                if [ "${IAM_GROUPS}" != "" ]
-                then
-                    echo "IAM_AUTHORIZED_GROUPS=\"${IAM_GROUPS}\"" >> /etc/aws-ec2-ssh.conf
-                fi
-
-                if [ "${SUDO_GROUPS}" != "" ]
-                then
-                    echo "SUDOERS_GROUPS=\"${SUDO_GROUPS}\"" >> /etc/aws-ec2-ssh.conf
-                fi
-
-                if [ "${LOCAL_GROUPS}" != "" ]
-                then
-                    echo "LOCAL_GROUPS=\"${LOCAL_GROUPS}\"" >> /etc/aws-ec2-ssh.conf
-                fi
-
-                if [ "${ASSUME_ROLE}" != "" ]
-                then
-                    echo "ASSUMEROLE=\"${ASSUME_ROLE}\"" >> /etc/aws-ec2-ssh.conf
-                fi
-
-                sed -i 's:#AuthorizedKeysCommand none:AuthorizedKeysCommand /opt/authorized_keys_command.sh:g' /etc/ssh/sshd_config
-                sed -i 's:#AuthorizedKeysCommandUser nobody:AuthorizedKeysCommandUser nobody:g' /etc/ssh/sshd_config
-
-                echo "*/10 * * * * root /opt/import_users.sh" > /etc/cron.d/import_users
-                chmod 0644 /etc/cron.d/import_users
-
-                /opt/import_users.sh
-
-                service sshd restart
+              source: 'https://raw.githubusercontent.com/widdix/aws-ec2-ssh/master/install.sh'
               mode: '000755'
               owner: root
               group: root