ansible/roles/vm-common/tasks/users.yml

# vim: ft=yaml.ansible
# code: language=ansible
---
- name: "Add users"
  user:
    name: "{{ item.name }}"
    comment: "{{ item.comment }}"
    password: "{{ item.password }}"
    groups: "{{ item.groups }}"
    update_password: always
    shell: /bin/bash
  loop: "{{ users | default([]) }}"

- name: "Add ssh authorized_keys"
  ansible.posix.authorized_key:
    user: "{{ item.name }}"
    key: "{{ item.ssh_keys | join('\n') }}"
    exclusive: true
  loop: "{{ users | default([]) }}"

- name: "Add ssh authorized_keys to root user"
  ansible.posix.authorized_key:
    user: "root"
    key: "{{ users | default([]) | map(attribute='ssh_keys') | flatten | join('\n') }}"
    exclusive: true