From d6fff04985da60ff8b8e76855dbb31f8a1fba0c8 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Sat, 16 Oct 2021 15:39:19 -0500
Subject: [PATCH] r/base: Set SSH authorized keys for root

To ensure all machines have the same keys to allow root to log in via
SSH (in case Active Directory is unavailable or something).
---
 roles/base/tasks/main.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index 89446ec..5df1ad1 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -21,3 +21,12 @@
   tags:
   - root-user
   - user
+- name: ensure ssh keys are authorized for root login
+  ansible.posix.authorized_key:
+    user: root
+    exclusive: true
+    key: '{{ root_authorized_keys }}'
+  when: root_authorized_keys is defined
+  tags:
+  - root-user
+  - ssh-key