Don't create absent ssh_authorized_key resources if purge_ssh_keys is…

… enabled
camptocamp · Oct 19, 2015 · 53228fb · 53228fb
1 parent 2c4a61b
commit 53228fb
Showing 1 changed file with 8 additions and 6 deletions.
diff --git a/manifests/account.pp b/manifests/account.pp
@@ -133,12 +133,14 @@
       }
     }
 
-    $keys_to_remove = suffix(keys(absents($::accounts::ssh_keys)), "-on-${name}")
-    accounts::authorized_key { $keys_to_remove:
-      ensure                   => absent,
-      account                  => $name,
-      target                   => $authorized_keys_target,
-      ssh_authorized_key_title => $ssh_authorized_key_title,
+    if ! $purge_ssh_keys {
+      $keys_to_remove = suffix(keys(absents($::accounts::ssh_keys)), "-on-${name}")
+      accounts::authorized_key { $keys_to_remove:
+        ensure                   => absent,
+        account                  => $name,
+        target                   => $authorized_keys_target,
+        ssh_authorized_key_title => $ssh_authorized_key_title,
+      }
     }
   }
 }