aboutsummaryrefslogtreecommitdiff
path: root/lib/puppet
diff options
context:
space:
mode:
authorRob Thomas <xrobau@gmail.com>2018-10-14 20:27:25 -0300
committerRob Thomas <xrobau@gmail.com>2018-10-14 20:27:25 -0300
commit3afa57bc96807a72ceb55d0c493d7cc80a11226b (patch)
treed4d2e8b99ca6cfad0306db9af30e67867af86d32 /lib/puppet
parent47dca14a37f9970f9c34b1210651eabaf46fba04 (diff)
downloadpuppet-sshkeys_core-3afa57bc96807a72ceb55d0c493d7cc80a11226b.tar.gz
puppet-sshkeys_core-3afa57bc96807a72ceb55d0c493d7cc80a11226b.tar.bz2
Update desc field
Diffstat (limited to 'lib/puppet')
-rw-r--r--lib/puppet/type/ssh_authorized_key.rb12
1 files changed, 11 insertions, 1 deletions
diff --git a/lib/puppet/type/ssh_authorized_key.rb b/lib/puppet/type/ssh_authorized_key.rb
index 5c4df53..4eff840 100644
--- a/lib/puppet/type/ssh_authorized_key.rb
+++ b/lib/puppet/type/ssh_authorized_key.rb
@@ -107,7 +107,17 @@ module Puppet
newproperty(:options, array_matching: :all) do
desc "Key options; see sshd(8) for possible values. Multiple values
- should be specified as an array."
+ should be specified as an array. For example, you could use the
+ following to install a SSH CA that allows someone with the
+ 'superuser' principal to log in as root
+
+ ssh_authorized_key { 'Company SSH CA':
+ ensure => present,
+ user => 'root',
+ type => 'ssh-ed25519',
+ key => 'AAAAC3NzaC[...]CeA5kG',
+ options => [ 'cert-authority', 'principals=\"superuser\"' ],
+ }"
defaultto { :absent }