changed SSH key queries to dedicated SSH keys, and automated password creation, for staging; removed token to be prompted instead

group_vars/armitage_test.yml

@@ -1,12 +1,6 @@
 # @TODO create inventory group variables akin to structure of sukaato group's for homeserver
 # <str<vault>> representing password for Linux root user account of VPS
-password: !vault |
-          $ANSIBLE_VAULT;1.1;AES256
-          32333335343939653231313938666134306338356633393035363039373465386165313666383262
-          6465313738316635633332623765336563626165336330370a616634393266366430363663333066
-          63373165346236386632393866316164623133373761303262643734356433646661636533666266
-          3834643765613937300a326365643961626236386261303933643965333565623836313231346537
-          3030
+password: "{{ lookup('password', '../.tmp/armitage_test.pass', seed='armitage_test') }}"
 # <str> representing hostname for LAN server; same as host or group variable name
 instance: armitage
 # <str<enum>> representing Linux distro or OS image to be used for VPS 
@@ -14,28 +8,19 @@ instance: armitage
 operating_system: ~
 # <list[<str>]> of control node or local SSH key basenames
 ssh_keys:
-  - ed25519@sukaato.hikiki
-  - ecdsa@sukaato.hikiki
+  - ed25519@staging
+  - ecdsa@staging
 # <list<dict>> list of administrative users (in Linux, users that can use "sudo")
 admins:
   - username: senpai # <str> arbitrary valid user name
     services: ~ # <list[<str>]> if linux system user, assocated servce
     # <list[<str>]> list of control node or local SSH key basenames for this user
     ssh_keys:
-      - ecdsa-37851076-sk@sukaato.hikiki
-      - ecdsa-37851072-sk@sukaato.hikiki
+      # @TODO add secondary and teriary Yubikeys
+      - ecdsa-37851076-sk@staging
+      - ed25519-37851076-sk@staging
     # <str<vault?>> hashed (and maybe salted) password
-    password: !vault |
-          $ANSIBLE_VAULT;1.1;AES256
-          34636132613365646330653431653236303563623464316638643439373761366564663264613738
-          3033343264373264333362616434333465323439653134340a643066663832353965313434386639
-          38366263646638353632656431366638393939623537326233306132306436363338373161643433
-          3439653833333164390a303430616561356464393030353433303738383730643330323031373432
-          62386231653339616436383837383966643539353036353034363132633539643332386131613537
-          31356230383561663735363530393562363237343166323635666665386165633130653864646238
-          39323735386161646531323335393639353630376136663063393930326434346435343937623336
-          33336132663238326662323536326638333139313535373166636363336366663962373936383536
-          62303536363939316563646630633064306364366331623665646533633065336236
+    password: "{{ lookup('password', '../.tmp/armitage_test.pass', seed='senpai:armitage_test') }}"
 # <dict[<str>:<dict>]> package groups
 pkgs:
   # <dict[<str>:<dict>]> representing package groups installed by package manager via repositories

group_vars/sukaato_test.yml

@@ -1,22 +1,7 @@
 # <str<vault>> representing password for Linux root user account of VPS
-password: !vault |
-          $ANSIBLE_VAULT;1.1;AES256
-          66353462633933306537323461663665643234306166366663653163306436333037313032306338
-          3762653037396437633835356630656438623163656536310a306163663234383265386133396634
-          34363163343766623739646334643031373239373630663731376239333764346531396363636131
-          6163343335356337660a366337336632333236326532373032353332333636366638616265356562
-          66616534303035386134623535373935373065326539363065623230633034313433
+password: "{{ lookup('password', '../.tmp/sukaato_test.pass', seed='sukaato_test') }}"
 # <str<vault>> representing API token for VPS cloud service
-token: !vault |
-          $ANSIBLE_VAULT;1.1;AES256
-          33333839333337323062326231626534616166646666343261343966636464346630363033653130
-          3035653864396363376633346362353239643939663462370a323935353061313563336435366331
-          30393463653661326539326234646438663133616634663439303932656137633839656533376433
-          3666643635613039390a323138393033623131326438616331386539666333613630316263613636
-          66663263373665343662393638623064356234646165343835623966643761333562323132396466
-          63363436333463653130323531343139316466316131313031343232343039396261616231376232
-          66383938333661363532303166306563396634663132396166646132663131373738396131626633
-          34393265343061356531
+token: ~
 # <str> representing name and hostname of VPS to be made in VPS cloud service
 instance: sukaato
 # <str<enum>> representing region options from or for given VPS cloud service
@@ -25,28 +10,19 @@ origin: us-east
 operating_system: linode/debian13
 # <list[<str>]> list of control node or local SSH key basenames for root user
 ssh_keys:
-  - ed25519@sukaato.hikiki
-  - ecdsa@sukaato.hikiki
+  - ed25519@staging
+  - ecdsa@staging
 # <list<dict>> list of administrative users (in Linux, users that can use "sudo")
 admins:
   - username: senpai # <str> arbitrary valid user name
     services: ~ # <list[<str>]> if linux system user, assocated servce
     # <list[<str>]> list of control node or local SSH key basenames for this user
     ssh_keys:
-      - ecdsa-37851076-sk@sukaato.hikiki
-      - ecdsa-37851072-sk@sukaato.hikiki
+      # @TODO add secondary and teriary Yubikeys
+      - ecdsa-37851076-sk@staging
+      - ed25519-37851076-sk@staging
     # <str<vault?>> hashed (and maybe salted) password
-    password: !vault |
-          $ANSIBLE_VAULT;1.1;AES256
-          31663265653031323833373663653132653532646638316465393364613961643130653330393062
-          6165386239303965386261363565353137636164356130370a336465353931373564393339363561
-          37353162333331663833656631663165356134633961323337663439663733316231666334336539
-          6537373334326634610a623037613462663733343230306538386561363838316638623365636533
-          32313931666439363435663161663665346266653763343265376366383837376436643163376430
-          39393861613037333766386138376335653334363737626664383236303234653461313230383564
-          33393834636165386562383435666233313664656233326364616237636230303264363732376639
-          64396564366335366430303031323865333635306536346463386334303235386438663061343934
-          37376466373566396130366330383834323332626166316661336339346462343466
+    password: "{{ lookup('password', '../.tmp/sukaato_test.pass', seed='senpai:sukaato_test') }}"
 # <dict[<str>:<dict>]> package groups
 pkgs:
   # <dict[<str>:<dict>]> representing package groups installed by package manager via repositories