aboutsummaryrefslogtreecommitdiff
path: root/lib/puppet
diff options
context:
space:
mode:
authorJosh Cooper <josh@puppet.com>2018-11-26 09:56:10 -0800
committerGitHub <noreply@github.com>2018-11-26 09:56:10 -0800
commitb51bd4961934fe0dc50f91955be02df6ee3711a2 (patch)
treeb2ae697b48292edaf5575b72c703a605f3e4a4d0 /lib/puppet
parente1653cdd9d6d509e94cfe1e1ab08f9aa8c561b1b (diff)
parent3afa57bc96807a72ceb55d0c493d7cc80a11226b (diff)
downloadpuppet-sshkeys_core-b51bd4961934fe0dc50f91955be02df6ee3711a2.tar.gz
puppet-sshkeys_core-b51bd4961934fe0dc50f91955be02df6ee3711a2.tar.bz2
Merge pull request #8 from xrobau/patch-1
Document 'options' param of ssh_authorized_key
Diffstat (limited to 'lib/puppet')
-rw-r--r--lib/puppet/type/ssh_authorized_key.rb12
1 files changed, 11 insertions, 1 deletions
diff --git a/lib/puppet/type/ssh_authorized_key.rb b/lib/puppet/type/ssh_authorized_key.rb
index e11134f..a36c069 100644
--- a/lib/puppet/type/ssh_authorized_key.rb
+++ b/lib/puppet/type/ssh_authorized_key.rb
@@ -107,7 +107,17 @@ module Puppet
newproperty(:options, array_matching: :all) do
desc "Key options; see sshd(8) for possible values. Multiple values
- should be specified as an array."
+ should be specified as an array. For example, you could use the
+ following to install a SSH CA that allows someone with the
+ 'superuser' principal to log in as root
+
+ ssh_authorized_key { 'Company SSH CA':
+ ensure => present,
+ user => 'root',
+ type => 'ssh-ed25519',
+ key => 'AAAAC3NzaC[...]CeA5kG',
+ options => [ 'cert-authority', 'principals=\"superuser\"' ],
+ }"
defaultto { :absent }