Remove ability to set multiple authorized keys for "core" user

* poseidon#145
* Additional users can be easily added upstream

aws/container-linux/kubernetes/bastion.tf

@@ -55,7 +55,7 @@ data "template_file" "bastion_config" {
   template = "${file("${path.module}/cl/bastion.yaml.tmpl")}"
 
   vars = {
-    ssh_authorized_keys_list = "[ ${join(", ", var.ssh_authorized_keys)} ]"
+    ssh_authorized_key = "${var.ssh_authorized_key}"
   }
 }
 

aws/container-linux/kubernetes/cl/bastion.yaml.tmpl

@@ -2,4 +2,5 @@
 passwd:
   users:
     - name: core
-      ssh_authorized_keys: ${ssh_authorized_keys_list}
+      ssh_authorized_keys:
+        - "${ssh_authorized_key}"

aws/container-linux/kubernetes/cl/controller.yaml.tmpl

@@ -155,4 +155,5 @@ storage:
 passwd:
   users:
     - name: core
-      ssh_authorized_keys: ${ssh_authorized_keys_list}
+      ssh_authorized_keys:
+        - "${ssh_authorized_key}"

aws/container-linux/kubernetes/controllers.tf

@@ -58,10 +58,10 @@ data "template_file" "controller_config" {
     # etcd0=https://cluster-etcd0.example.com,etcd1=https://cluster-etcd1.example.com,...
     etcd_initial_cluster = "${join(",", formatlist("%s=https://%s:2380", null_resource.repeat.*.triggers.name, null_resource.repeat.*.triggers.domain))}"
 
-    kubeconfig               = "${indent(10, module.bootkube.kubeconfig)}"
-    ssh_authorized_keys_list = "[ ${join(", ", var.ssh_authorized_keys)} ]"
-    k8s_dns_service_ip       = "${cidrhost(var.service_cidr, 10)}"
-    cluster_domain_suffix    = "${var.cluster_domain_suffix}"
+    kubeconfig            = "${indent(10, module.bootkube.kubeconfig)}"
+    ssh_authorized_key    = "${var.ssh_authorized_key}"
+    k8s_dns_service_ip    = "${cidrhost(var.service_cidr, 10)}"
+    cluster_domain_suffix = "${var.cluster_domain_suffix}"
   }
 }