Improve SSH configuration for nodes

Ensure hostbased auth works with configs, remove erroneous old conditional for authtypes, remove obsolete config option.
2020-08-06 15:54:12 -04:00
parent 6851d42885
commit a0e4f3bd30
3 changed files with 8 additions and 7 deletions
--- a/roles/base/templates/etc/ssh/ssh_known_hosts.j2
+++ b/roles/base/templates/etc/ssh/ssh_known_hosts.j2
@ -1,3 +1,6 @@
 # SSH remote allowed hosts
 # {{ ansible_managed }}

+{% for host in groups[cluster_group] %}
+{{ host }},{{ host.split('.')[0] }}.{{ networks['cluster']['domain'] }},{{ host.split('.')[0] }} ssh-ed25519 {{ hostvars[host].ansible_ssh_host_key_ed25519_public }}
+{% endfor %}