authzkeys.yml

# file: authzkeys.yml
#
# Playbook for managing SSH authorized keys in ~/.ssh/authorized_keys.
# 
# The `authz_keys_paths` variable needs to be defined to specify the paths
# to files containing the public keys. You can include keys based on matching
# files or specifying individual paths.
#
# Example using patterns to match files:
# authz_keys_paths:
#  - "{{ inventory_dir }}/files/authorized_keys/devs/*.pub"
#  - "{{ inventory_dir }}/files/authorized_keys/ops/*.pub"
#
# Example using multiple paths:
# authz_keys_paths:
#  - "{{ inventory_dir }}/files/authorized_keys/devs/alice.pub"
#  - "{{ inventory_dir }}/files/authorized_keys/ops/bob.pub"
# 
# N.B. The playbook will *remove* all other non-specified keys from the
# authorized_keys file. Defining authz_keys_paths as an empty list
# will result in an *empty* authorized_keys file
#
---

- hosts: all

  tasks:

    - set_fact: 
        authzkeys_list: "{{ lookup('file', item) }}"
      register: authzkeys
      with_fileglob: "{{ authz_keys_paths }}"

    - set_fact:
        authzkeys_string: "{{ authzkeys.results | map(attribute='ansible_facts.authzkeys_list') | join('\n') }}"

    - ansible.posix.authorized_key:
        user: "{{ ansible_user }}"
        key: "{{ authzkeys_string }}"
        exclusive: true