Skip to content

Commit e405df8

Browse files
committed
configure_ssh_client_signer: Fix use of 'unsafe' method
Recent change to Ansible
1 parent 1ae82a1 commit e405df8

File tree

1 file changed

+14
-13
lines changed
  • roles/configure_ssh_client_signer/tasks

1 file changed

+14
-13
lines changed

roles/configure_ssh_client_signer/tasks/main.yml

Lines changed: 14 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -32,20 +32,21 @@
3232
{%- for name, options in bbcrd_vault_ssh_client_signer_roles.items() -%}
3333
{%- set options = bbcrd_vault_configure_ssh_client_signer_default_role_options | combine(options) -%}
3434
{%-
35-
set _ = roles.__setitem__(
36-
name,
35+
set _ = roles.update(
3736
{
38-
"key_type": "ca",
39-
"allow_user_certificates": True,
40-
"algorithm_signer": options["algorithm"],
41-
"default_user": options["users"] | join(","),
42-
"allowed_users": options["users"] | join(","),
43-
"default_extensions": (
44-
options["extensions"]
45-
| bbcrd.vault.vault_ssh_allowed_extensions_dict
46-
),
47-
"ttl": options["ttl"],
48-
"max_ttl": options["ttl"],
37+
name: {
38+
"key_type": "ca",
39+
"allow_user_certificates": True,
40+
"algorithm_signer": options["algorithm"],
41+
"default_user": options["users"] | join(","),
42+
"allowed_users": options["users"] | join(","),
43+
"default_extensions": (
44+
options["extensions"]
45+
| bbcrd.vault.vault_ssh_allowed_extensions_dict
46+
),
47+
"ttl": options["ttl"],
48+
"max_ttl": options["ttl"],
49+
}
4950
}
5051
)
5152
-%}

0 commit comments

Comments
 (0)