Ansible Create Users and Groups Kodekloud

 

Question: Several new developers and DevOps engineers just joined the xFusionCorp industries. They have been assigned the Nautilus project, and as per the onboarding process we need to create user accounts for new joinees on at least one of the app servers in Stratos DC. We also need to create groups and make new users members of those groups. We need to accomplish this task using Ansible. Below you can find more information about the task.

There is already an inventory file ~/playbooks/inventory on jump host.

On jump host itself there is a list of users in ~/playbooks/data/users.yml file and there are two groups — admins and developers —that have list of different users. Create a playbook ~/playbooks/add_users.yml on jump host to perform the following tasks on app server 3 in Stratos DC.

a. Add all users given in the users.yml file on app server 3.

b. Also add developers and admins groups on the same server.

c. As per the list given in the users.yml file, make each user member of the respective group they are listed under.

d. Make sure home directory for all of the users under developers group is /var/www (not the default i.e /var/www/{USER}). Users under admins group should use the default home directory (i.e /home/devid for user devid).

e. Set password TmPcZjtRQx for all of the users under developers group and ksH85UJjhb for of the users under admins group. Make sure to use the password given in the ~/playbooks/secrets/vault.txt file as Ansible vault password to encrypt the original password strings. You can use ~/playbooks/secrets/vault.txt file as a vault secret file while running the playbook (make necessary changes in ~/playbooks/ansible.cfg file).

f. All users under admins group must be added as sudo users. To do so, simply make them member of the wheel group as well.

Note: Validation will try to run the playbook using command ansible-playbook -i inventory add_users.yml so please make sure playbook works this way, without passing any extra arguments.

Solution:

go to playbooks folder

cd playbooks

Check the necessary configuration

cat inventory

cat data/users.yml

cat secrets/vault.txt

Edit the ansible.cfg file

vi ansible.cfg

Add this line at the end

vault_password_file = /home/thor/playbooks/secrets/vault.txt

Then create add_users.yml and change the yml according to configuration (mentioned users, password)

- name: Ansbile Add User & Group

hosts: stapp03

become: yes

tasks:

- name: Creating Admin Groups

group:

name:

admins

state: present

- name: Creating Dev Groups

group:

name:

developers

state: present

- name: Creating Admins Group Users

user:

name: "{{ item }}"

password: "{{ 'ksH85UJjhb' | password_hash ('sha512') }}"

groups: admins,wheel

state: present

loop:

- rob

- david

- joy

- name: Creating Developers Group Users

user:

name: "{{ item }}"

password: "{{ 'TmPcZjtRQx' | password_hash ('sha512') }}"

home: "/var/www/{{ item }}"

group: developers

state: present

loop:

- tim

- ray

- jim

- mark

Finally run the ansible command

 ansible-playbook -i inventory add_users.yml

Download Coding Interview Book and Get More Tutorials for Coding and Interview Solution: Click Here

Download System Design Interview Book and Get More Tutorials and Interview Solution: Click Here

Do you need more Guidance or Help? Then Book 1:1 Quick Call with Me: Click Here

Share on Google Plus

About Ashadullah Shawon

I am Ashadullah Shawon. I am a Software Engineer. I studied Computer Science and Engineering (CSE) at RUET. I Like To Share Knowledge. Learn More: Click Here