build

roles/init/tasks/main.yml

@@ -151,7 +151,8 @@
           template {
             destination = "/home/jd/.ssh/id_ed25519-cert.pub"
             perms = "0644"
-
+            user = "jd"
+            group = "jd"
             contents = <<EOH
           {{ '{{' }} with secret "ssh/sign/admin" (printf "public_key=%s" (trimSpace (file "/home/jd/.ssh/id_ed25519.pub"))) "valid_principals=jd" {{ '}}' }}
           {{ '{{' }} .Data.signed_key {{ '}}' }}
@@ -189,7 +190,7 @@
         owner: root
         group: root
         mode: '0644'
-        
+
     - name: Enable and start vault agent service
       systemd:
         name: vault-agent