Improve SSH configuration for nodes

Ensure hostbased auth works with configs, remove erroneous old conditional for authtypes, remove obsolete config option.
2023-09-01 15:42:24 -04:00
parent 88209a2b70
commit 777a4693a1
3 changed files with 8 additions and 7 deletions
--- a/roles/base/templates/etc/ssh/ssh_known_hosts.j2
+++ b/roles/base/templates/etc/ssh/ssh_known_hosts.j2
@ -1,3 +1,6 @@
 # SSH remote allowed hosts
 # {{ ansible_managed }}

+{% for host in groups[cluster_group] %}
+{{ host }},{{ host.split('.')[0] }}.{{ networks['cluster']['domain'] }},{{ host.split('.')[0] }} ssh-ed25519 {{ hostvars[host].ansible_ssh_host_key_ed25519_public }}
+{% endfor %}