The `root_authorized_keys` variable was originally defined only for the *pyrocufflink* group. This used to effectively be "all" machines, since everything was a member of the AD domain. Now that we're moving away from that deployment model, we still want to have the break-glass option, so we need to define the authorized keys for the _all_ group. |
||
---|---|---|
.. | ||
main.yml |