Puppet module for managing SSH keys https://cgit.fluxo.info/puppet-sshkeys_core/atom?h=main 2020-05-27T14:41:49+00:00 2020-05-27T14:41:49+00:00 Gabriel Nagy gabriel.nagy@puppet.com 2020-05-27T14:01:20+00:00 urn:sha1:2e059d49fbd48d0c4897518941f6a2b65785852a After adding support for composite namevars in version 2.0.0, the module lost the ability to purge sshkeys. This happens due to Puppet being unable to correctly match the names and types of the sshkeys to be purged. Part of the fix was done in https://github.com/puppetlabs/puppet/pull/8174, which changes how a resource is initialized if the provider implements a `title` method. Additionally, we add the key name and type to be included in the output shown by `puppet resource`. 2020-02-25T12:27:27+00:00 Ciprian Badescu ciprian.badescu@puppet.com 2020-02-20T13:32:52+00:00 urn:sha1:92a734a6620fcc51691d60347e344f87ac801bde After this modification it will be possible to add two or more keys of different types for the same host 2019-10-23T09:23:47+00:00 Gabriel Nagy gabriel.nagy@puppet.com 2019-08-13T09:41:03+00:00 urn:sha1:b2c153b6ff070d620d47c83265992f7226646ee8 Previously, when the `target` property was set, the ssh_authorized_key resource could not create directories/files within root-owned paths. This behavior is due to the module switching context to the user, then attempting to create the directory/file as the specified user, ultimately failing because of insufficient permissions. This commit adds a new parameter, `drop_privileges` which when set to false allows the module to write a ssh_authorized_key file in a privileged path. Due to the possible security implications of this, the parameter must be manually specified in order to activate this functionality. A path is considered to be privileged/trusted if all of its ancestors: - do not contain any symlinks - have the same owner as the user who runs Puppet - are not world/group writable 2018-06-25T18:26:53+00:00 Jacob Helwig jacob@technosorcery.net 2018-06-25T18:07:12+00:00 urn:sha1:93ebe94656230209315ce0214103b239a28dec5e By restructuring this code to use a guard clause style, we can also get rid of the assignment in conditional. 2018-06-21T21:45:50+00:00 Jacob Helwig jacob@technosorcery.net 2018-06-21T21:45:50+00:00 urn:sha1:b918a193de16f9b1c88687ccfab91664f975f1ab 2018-06-21T21:27:04+00:00 Jacob Helwig jacob@technosorcery.net 2018-06-04T18:30:09+00:00 urn:sha1:d1719de1d77b9c139b1b5f5832330807c0fe11fe Imported from dbf5a8964af9b87446542d24f46534cf90f11f59 in the Puppet repo.