more refactoring of remote-admin-user playbook

group_vars/all.yml

@@ -0,0 +1 @@
+---

group_vars/development.yml

@@ -1,5 +1 @@
 ---
-
-# this actually gets overriden by ansible_ssh_user in the inventory,
-# but should be defined here regardless, to avoid an undefined variable error
-my_remote_user: vagrant

group_vars/staging.yml

@@ -1,3 +1,5 @@
 ---
 
-my_remote_user: admin
+admin_user:
+  name: admin
+  group: admin

remote-admin-user.yml

@@ -2,19 +2,14 @@
 
 - name: create an admin user (i.e. a non-root sudoer)
   hosts: all:!development # development machines on vagrant already have a sudoer
-  remote_user: root # Digital Ocean machines are provided with a root user by default
+  remote_user: root # Digital Ocean machines are provided with a root user by default, so we use this user to create our admin user.
 
   roles:
     - admin_user
 
 - name: test the admin user
   hosts: staging
-  remote_user: admin
-
-  pre_tasks:
-    - debug:
-        var: my_remote_user
+  remote_user: "{{ admin_user.name }}"
 
   roles:
-    # - { role: admin_user, when: "'development' not in group_names" }
-    - { role: remote_user_test, tags: ['remote_user_test'] }
+    - remote_user_test

roles/admin_user/defaults/main.yml

@@ -0,0 +1,5 @@
+---
+
+admin_user:
+  name: admin
+  group: admin

roles/admin_user/tasks/main.yml

@@ -2,23 +2,23 @@
 
 - name: create admin group
   group:
-    name: admin
+    name: "{{ admin_user.group }}"
 
 - name: Allow admin group to have passwordless sudo
   lineinfile:
     dest: /etc/sudoers
     state: present
-    regexp: '^%admin'
-    line: '%admin ALL=(ALL) NOPASSWD: ALL'
+    regexp: '^%{{ admin_user.group }}'
+    line: '%{{ admin_user.group }} ALL=(ALL) NOPASSWD: ALL'
 
 - name: create admin user in admin group
   user:
-    name: admin
-    groups: admin
+    name: "{{ admin_user.name }}"
+    groups: "{{ admin_user.group }}"
     append: yes
     shell: /bin/bash
 
 - name: add ssh public key for admin user
   authorized_key:
-    user: admin
+    user: "{{ admin_user.name }}"
     key: "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"

roles/remote_user_test/tasks/main.yml

@@ -12,6 +12,10 @@
   debug:
     msg: "user: {{ user_name.stdout }} --- home: {{ user_home.stdout }}"
 
-- name: test sudo pwd
+- name: test sudo on the pwd command
   become: yes
   command: pwd
+  register: sudo_result
+
+- debug:
+    var: sudo_result.stdout