| --- | |
| # ssh-pki/tasks/main.yml | |
| pki_dir: "/opt/pki" | |
| ssh_pki_dir: "/opt/ssh_pki" | |
| credentials_dir: "/opt/credentials" | |
| # password on SSH CA | |
| ssh_ca_phrase: "{{ lookup('password', credentials_dir ~ '/ssh_ca_phrase length=64') }}" | |
| # ssh-keygen parameters | |
| ssh_keytype: rsa | |
| ssh_keysize: 4096 | |
| # lists of keys to generate | |
| ssh_client_genkeys: | |
| - name: headnode | |
| ssh_host_genkeys: [] | |