From 3282c7f311f08bcdcc27aeb70d58346061b879ae Mon Sep 17 00:00:00 2001 From: Tyler Hale Date: Sat, 9 Jul 2022 11:32:31 -0600 Subject: [PATCH] Adding option to disable the password for the manage account --- roles/base/defaults/main.yml | 3 +++ roles/base/tasks/core.yml | 6 ++++++ 2 files changed, 9 insertions(+) diff --git a/roles/base/defaults/main.yml b/roles/base/defaults/main.yml index eaf6c7f..501be1d 100644 --- a/roles/base/defaults/main.yml +++ b/roles/base/defaults/main.yml @@ -11,6 +11,9 @@ # User that should have the authorized keys added base_core_management_user: "{{ ansible_user }}" +# If enabled, the password for the management user account will be disabled +base_core_management_user_disable_password: false + # Install all available updates at runtime base_core_install_updates: true diff --git a/roles/base/tasks/core.yml b/roles/base/tasks/core.yml index 51c7be4..7072883 100644 --- a/roles/base/tasks/core.yml +++ b/roles/base/tasks/core.yml @@ -26,6 +26,12 @@ org_id: "{{ base_redhat_subscription_org_id }}" pool: '^(Red Hat Enterprise Server|Red Hat Virtualization)$' when: ansible_distribution == 'RedHat' and base_redhat_subscription_org_id != "" and base_redhat_subscription_activationkey != "" + +- name: Disable passsword for management account + user: + name: "{{ base_core_management_user }}" + password_lock: yes + when: base_core_management_user_disable_password == true - name: "*** MOTD Configuration ***" include_tasks: