addAdminUser.yml

# This playbook adds an admin user with the given name to all machines.
# It creates a linux user, adds it to sudo group and puts the ssh key to all machines.
# The Google Authenticator file is only put to the jumphosts.

# The parameters `username` and `path_to_google_auth` are required.
# Usage:
# ansible-playbook addAdminUser.yml --extra-vars "username=tacocat path_to_google_auth=absolute/path/to/.google_authenticator"

- hosts:
  - all

  become: yes
  become_user: root

  pre_tasks:
    - name: Create a linux sudo user
      user:
        name: "{{ username }}"
        create_home: yes
        state: present
        groups: sudo
        append: yes
        shell: /bin/bash

  roles:
    - role: add_ssh_key
      vars:
        username: "{{ username }}"

# Put the GA file only on jumphost
- hosts:
  - jumphost

  become: yes
  become_user: root

  roles:
    - role: add_GA_file
      vars:
        username: "{{ username }}"
        path_to_google_auth: "{{ path_to_google_auth }}"