Playbook to create system users in wheel group, allow wheel passwordless sudo, and add their key to authorized_keys to allow ssh login

customer_users.yml

---
#
# /opt/rpc-openstack/rpcd/playbooks/customer_users.yml
#
- name: Create customers users and keys
  hosts:
    - infra_hosts
    - compute_hosts
    - log_hosts
    - mons_hosts
    - osds_hosts
    - storage_hosts
    - swift_hosts
  user: root
  tasks:
    - name: Make sure we have a "wheel" group
      group:
        name: wheel
        state: present

    - name: Allow "wheel" group to have passwordless sudo
      lineinfile:
        dest: /etc/sudoers
        state: present
        regexp: "^%wheel"
        line: "%wheel ALL=(ALL) NOPASSWD: ALL"

    - name: Add customer users to "wheel" group
      user:
        name: "{{ item.name }}"
        groups: wheel
        append: yes
      with_items: "{{ customer_users }}"

    - name: Add customer users keys to authorized_keys
      authorized_key:
        user: "{{ item.name }}"
        key: "{{ item.key }}"
      with_items: "{{ customer_users }}"

user_extras_variables.yml

# /etc/openstack_deploy/user_extras_variables.yml
# add this variable to the bottom of existing file

customer_users:
  - { name: 'user1',   key: 'ssh-rsa ...' }
  - { name: 'user2',   key: 'ssh-rsa ...' }