captn3m0 / terraform-ignition-github-team-ssh-users

Generate a ignition config to create multiple users from a github team. SSH Keys for all users are picked up from GitHub.

terraform-ignition-github-team-ssh-users

Generate a ignition config to create multiple users from a github team. SSH Keys for all users are picked up from GitHub. This can be used to automate creation of user accounts on your servers by using their SSH keys that are already pushed to GitHub.

The user list is picked up by taking a github team under the organization.

The flow is:

INPUT         -> -------- -> OUTPUT
[GitHub Team] -> [Module] -> [Ignition config]

See the module input and output variables at either Terraform Registry or MODULES.md

Usage

module "ignition" {
	source    = "captn3m0/github-team-ssh-users/ignition"
	version   = "1.0.0"
	team_slug = "sshusers"
}

// The return value from this is a userdata blob, so you can either
// upload it to S3 and then append the S3 URL to your userdata, like:
resource "aws_s3_bucket_object" "s3" {
	key     = "users.json"
	bucket  = "ignition-bucket"
	content = "${module.ignition.rendered}"
}

data "ignition_config" {
	// Rest of your config goes here
	systemd = []
	// Append these users to the config
	append {
		source       = "s3://${aws_s3_bucket_object.bucket}/${aws_s3_bucket_object.key}"
		verification = "sha512-${sha512(module.ignition.rendered)}"
	}
}

// Or alternatively, you may use the source/verification outputs:
data "ignition_config" {
	// Rest of your config goes here
	systemd = []
	// Append these users to the config
	append {
		source       = "${module.ignition.source}"
		verification = "${module.ignition.verification}"
	}
}

// You'll need to setup your GitHub provider for this to work:
provider "github" {
	token        = "${var.github_token}"
	organization = "your-organization-name"
}

Or alternatively, you can

License

Licensed under the MIT License. See LICENSE file for details. Copyright 2019 Abhay Rana