Adding option for configuring a secondary account

roles/base/defaults/main.yml

@@ -8,12 +8,18 @@
 # General
 # =======
 
-# User that should have the authorized keys added
+# User that should be configured for future management
 base_core_management_user: "{{ ansible_user }}"
 
+# Secondary user that may be configured for future management
+base_core_secondary_user: ""
+
 # If enabled, the password for the management user account will be disabled
 base_core_management_user_disable_password: false
 
+# If enabled, the password for the secondary user account will be disabled
+base_core_secondary_user_disable_password: false
+
 # Install all available updates at runtime
 base_core_install_updates: true
 
@@ -53,9 +59,6 @@ base_core_root_ca_url: ""
 # SSH
 # ===
 
-# Added the public keys to an additional user if defined
-base_core_ssh_public_keys_user: ""
-
 # Allow ssh root login
 base_core_ssh_permit_root_login: false
 

roles/base/tasks/core.yml

@@ -83,3 +83,9 @@
     name: "{{ base_core_management_user }}"
     password_lock: yes
   when: base_core_management_user_disable_password == true
+
+- name: Disable password for secondary management account
+  user:
+    name: "{{ base_core_secondary_user }}"
+    password_lock: yes
+  when: base_core_secondary_user != "" and base_core_secondary_user_disable_password == true

roles/base/tasks/core_ssh.yml

@@ -30,12 +30,12 @@
 
 - name: Setup authorized keys for secondary user
   authorized_key:
-    user: "{{ base_core_ssh_public_keys_user }}"
+    user: "{{ base_core_secondary_user }}"
     state: present
     key: '{{ lookup("file", item) }}'
   with_fileglob:
     - "public_keys/*"
-  when: base_core_ssh_public_keys_user != ""
+  when: base_core_secondary_user != ""
   tags:
   - authorized_key