diff --git a/manifests/account.pp b/manifests/account.pp index 39ce4ad..08b515c 100644 --- a/manifests/account.pp +++ b/manifests/account.pp @@ -133,12 +133,14 @@ } } - $keys_to_remove = suffix(keys(absents($::accounts::ssh_keys)), "-on-${name}") - accounts::authorized_key { $keys_to_remove: - ensure => absent, - account => $name, - target => $authorized_keys_target, - ssh_authorized_key_title => $ssh_authorized_key_title, + if ! $purge_ssh_keys { + $keys_to_remove = suffix(keys(absents($::accounts::ssh_keys)), "-on-${name}") + accounts::authorized_key { $keys_to_remove: + ensure => absent, + account => $name, + target => $authorized_keys_target, + ssh_authorized_key_title => $ssh_authorized_key_title, + } } } }