Re key all containers using a specific public key within an OpenStack Ansible environment. USAGE: openstack-ansible /tmp/rekey.yml -e "user_provided_key=~/.ssh/id_rsa.pub"

gistfile1.txt

---
- name: Re-Key authorized keys in containers
  hosts: localhost
  connection: local
  user: root
  tasks:
    - name: Store user user provided key
      command: "cat {{ user_provided_key }}"
      register: _stored_user_provided_key
    - name: load containers as facts
      set_fact:
        stored_user_provided_key: "{{ _stored_user_provided_key.stdout }}"

- name: Re-Key authorized keys in containers
  hosts: hosts
  user: root
  tasks:
    - debug: var=hostvars["localhost"]["stored_user_provided_key"]
    - name: Discover containers
      command: lxc-ls
      register: _discovered_containers
    - name: load containers as facts
      set_fact:
        discovered_containers: "{{ _discovered_containers.stdout.split() }}"
    - name: Inject new key
      lxc_container:
        name: "{{ item }}"
        container_command: |
          echo '{{ hostvars["localhost"]["stored_user_provided_key"] }}' | tee /root/.ssh/authorized_keys
      with_items: discovered_containers