Revert "Drop linux capabilities and rework users/groups"

roles/adduser/defaults/main.yml

@@ -1,40 +1,24 @@
 ---
 addusers:
   etcd:
-    name: "{{ etcd_user }}"
+    name: etcd
     comment: "Etcd user"
-    createhome: >-
-      {% if ansible_os_family in ["CoreOS", "Container Linux by CoreOS"] %}no{% else %}yes{% endif %}
+    createhome: yes
     home: "/var/lib/etcd"
     system: yes
-    shell: /usr/sbin/nologin
-    group: "{{ etcd_group }}"
-    groups: "{{ etcd_cert_group }}"
-    type: >-
-      {% if ansible_os_family in ["CoreOS", "Container Linux by CoreOS"] %}cloud-init{% endif %}
+    shell: /bin/nologin
   kube:
-    name: "{{ kubelet_user }}"
+    name: kube
     comment: "Kubernetes user"
-    shell: /usr/sbin/nologin
+    shell: /sbin/nologin
     system: yes
-    group: "{{ kubelet_group }}"
-    groups: "{{ etcd_cert_group }},{{ kube_cert_group }}"
+    group: "{{ kube_cert_group }}"
     createhome: no
-  netplug:
-    name: "{{ netplug_user }}"
-    comment: "Network plugin user"
-    createhome: no
-    system: yes
-    shell: /usr/sbin/nologin
-    group: "{{ netplug_group }}"
-    groups: "{{ etcd_cert_group }}"
 
 adduser:
   name: "{{ user.name }}"
   group: "{{ user.name|default(None) }}"
-  groups: "{{ user.groups|default(None) }}"
   comment: "{{ user.comment|default(None) }}"
   shell: "{{ user.shell|default(None) }}"
   system: "{{ user.system|default(None) }}"
   createhome: "{{ user.createhome|default(None) }}"
-  type: "{{ user.type|default(None) }}"

roles/adduser/handlers/main.yml

@@ -1,4 +0,0 @@
----
-- name:  User | update users for cloud-init
-  command: /usr/bin/coreos-cloudinit --from-file /etc/{{ user.name }}_user_cloud_init_conf
-  when: ansible_os_family in ["CoreOS", "Container Linux by CoreOS"]

roles/adduser/tasks/main.yml

@@ -1,35 +1,13 @@
 ---
-- name: User | Create Certificate Access Groups
-  group: name={{ item }} system=yes
-  with_items: "{{ user.groups.split(',') }}"
-
 - name: User | Create User Group
   group: name={{user.group|default(user.name)}} system={{user.system|default(omit)}}
 
-- name: User | Create cloud-init user
-  template:
-    dest: /etc/{{ user.name }}_user_cloud_init_conf
-    src: users.j2
-    owner: root
-    mode: 0640
-  notify: User | update users for cloud-init
-  when: "{{ user.type|default('standard') == 'cloud-init' }}"
-
-- meta: flush_handlers
-
-- name: User | Hack groups for existing cloud-init users CoreOS
-  command: /usr/sbin/usermod -aG {{ item }} {{ user.name }}
-  with_items: "{{ user.groups.split(',') }}"
-  when: "{{ ansible_os_family in ['CoreOS', 'Container Linux by CoreOS'] and user.type|default('standard') == 'cloud-init' }}"
-
 - name: User | Create User
   user:
     comment: "{{user.comment|default(omit)}}"
-    createhome: "{{user.createhome|default(omit)}}"
+    createhome: "{{user.create_home|default(omit)}}"
     group: "{{user.group|default(user.name)}}"
-    groups: "{{user.groups|default(omit)}}"
     home: "{{user.home|default(omit)}}"
     shell: "{{user.shell|default(omit)}}"
     name: "{{user.name}}"
     system: "{{user.system|default(omit)}}"
-  when: "{{ user.type|default('standard') != 'cloud-init' }}"

roles/adduser/templates/users.j2

@@ -1,15 +0,0 @@
-#cloud-config
-users:
-- name: {{ user.name  }}
-  gecos: {{ user.comment }}
-  system: {{ user.system|bool }}
-  no-log-init: {{ user.system|bool }}
-  primary-group: {{ user.group }}
-  no-create-home: {{ not user.createhome|bool }}
-  homedir: {{ user.home }}
-  shell: {{ user.shell }}
-  groups: |
-    {% for g in user.groups.split(',') %}
-    - {{ g }}
-    {% endfor %}
-    #

roles/adduser/vars/coreos.yml

@@ -0,0 +1,8 @@
+---
+addusers:
+  - name: kube
+    comment: "Kubernetes user"
+    shell: /sbin/nologin
+    system: yes
+    group: "{{ kube_cert_group }}"
+    createhome: no

roles/adduser/vars/debian.yml

@@ -0,0 +1,15 @@
+---
+addusers:
+  - name: etcd
+    comment: "Etcd user"
+    createhome: yes
+    home: "/var/lib/etcd"
+    system: yes
+    shell: /bin/nologin
+
+  - name: kube
+    comment: "Kubernetes user"
+    shell: /sbin/nologin
+    system: yes
+    group: "{{ kube_cert_group }}"
+    createhome: no

roles/adduser/vars/redhat.yml

@@ -0,0 +1,15 @@
+---
+addusers:
+  - name: etcd
+    comment: "Etcd user"
+    createhome: yes
+    home: "/var/lib/etcd"
+    system: yes
+    shell: /bin/nologin
+
+  - name: kube
+    comment: "Kubernetes user"
+    shell: /sbin/nologin
+    system: yes
+    group: "{{ kube_cert_group }}"
+    createhome: no