machine_setup/ansible/environments/jail/host_vars/admin_git

os_flavor: "freebsd"
users:
  talexander:
    initialize: true
    uid: 11235
    gid: 11235
    groups:
      - name: wheel
    authorized_keys:
      - yubikey
      - main_fido
      - backup_fido
  git:
    initialize: false
    shell: /usr/local/bin/git-shell
    authorized_keys:
      - yubikey
      - main_fido
      - backup_fido
sshd_enabled: true
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 21:35:09 +00:00			`os_flavor: "freebsd"`
			`users:`
			`talexander:`
			`initialize: true`
			`uid: 11235`
			`gid: 11235`
			`groups:`
			`- name: wheel`
			`authorized_keys:`
			`- yubikey`
			`- main_fido`
			`- backup_fido`
			`git:`
			`initialize: false`
			`shell: /usr/local/bin/git-shell`
			`authorized_keys:`
			`- yubikey`
			`- main_fido`
			`- backup_fido`
			`sshd_enabled: true`