ansible_setup_ssh_rollback.yml

# Ansible playbook to ROLLBACK the passwordless SSH login to remote hosts.
#
# run the playbook as:
#
# ansible-playbook -i hosts ansible_setup_passwordless_ssh_rollback.yml
#
#
# 
---
- hosts: local_host
  gather_facts: false
  vars:
    ssh_key_content: ""
  vars_prompt:
    - name: confirmation
      prompt: "Type 'YES' to ROLLBACK the passwordless login configuration to the remote hosts:"
      default: 'NO'
      private: no
      when: confirmation != "YES"
  pre_tasks:
    - name: "Check Confirmation"
      fail: msg="Exiting... You must type 'YES' to continue."
      when: confirmation != "YES"

  tasks:

    - name: check .ssh local directory exists
      stat:
        path: "~/.ssh"
      register: ssh_directory_exists_check

    # - debug:
    #     var: ssh_directory_exists_check

    - name: check .ssh key file exists
      stat:
        path: "~/.ssh/{{item}}"
      register: ssh_key_file_exists_check
      with_items:
        - "{{ssh_key_filename}}"
        - "{{ssh_key_filename}}.pub"

    - name: fail if .ssh key is missing
      fail:
        msg: "the {{ssh_key_filename}}.pub was NOT found in .ssh folder"
      when: ssh_key_file_exists_check.results[1].stat.exists == false

    # - debug:
    #     var: ssh_key_file_exists_check.results[1].stat.exists

    - name: get ssh key to remove from the file
      set_fact:
        ssh_key_content: "{{ lookup('file', '~/.ssh/{{ssh_key_filename}}.pub') }}"
    
    # - debug:
    #     var: ssh_key_content

- hosts: ansible_setup_passwordless_setup_group
  gather_facts: false
  vars:
    ssh_key_content_to_remove: "{{ hostvars['localhost'].ssh_key_content }}"
  
  tasks:

    - name: delete the ssh key from the remote hosts
      lineinfile:
        path: ~/.ssh/authorized_keys
        line: "{{ ssh_key_content_to_remove }}"
        state: absent
        backup: yes
      register: ssh_key_removal_execution
      
    # - debug:
    #     var: ssh_key_removal_execution

- hosts: localhost
  gather_facts: false

  tasks:

    - name: delete the 2 key files from localhost
      file:
        path: "~/.ssh/{{ item }}"
        state: absent
      register: keys_deletion_execution
      with_items: 
        - "{{ssh_key_filename}}"
        - "{{ssh_key_filename}}.pub"

    # - debug:
    #     var: keys_deletion_execution

    - name: clear the ~/.ssh/config file
      lineinfile:
        path: "~/.ssh/config"
        line: "IdentityFile ~/.ssh/{{ssh_key_filename}}"
        state: absent
        backup: yes
      register: ssh_config_file_key_deletion

    # - debug:
    #     var: ssh_config_file_key_deletion