| Zack Williams | ba5549c | 2017-03-25 15:04:45 -0700 | [diff] [blame] | 1 | --- |
| 2 | # ssh-pki/tasks/main.yml |
| 3 | |
| Zack Williams | 44845c6 | 2017-04-21 13:57:14 -0700 | [diff] [blame] | 4 | ssh_pki_dir: "{{ playbook_dir }}/ssh_pki" |
| 5 | credentials_dir: "{{ playbook_dir }}/credentials" |
| Zack Williams | ba5549c | 2017-03-25 15:04:45 -0700 | [diff] [blame] | 6 | |
| 7 | # password on SSH CA |
| 8 | ssh_ca_phrase: "{{ lookup('password', credentials_dir ~ '/ssh_ca_phrase length=64') }}" |
| 9 | |
| 10 | # ssh-keygen parameters |
| 11 | ssh_keytype: rsa |
| 12 | ssh_keysize: 4096 |
| 13 | |
| Zack Williams | c989f26 | 2017-05-11 13:02:59 -0700 | [diff] [blame] | 14 | # name of master ssh key for this pod |
| 15 | pod_sshkey_name: "headnode" |
| 16 | |
| Zack Williams | ba5549c | 2017-03-25 15:04:45 -0700 | [diff] [blame] | 17 | # lists of keys to generate |
| 18 | ssh_client_genkeys: |
| Zack Williams | c989f26 | 2017-05-11 13:02:59 -0700 | [diff] [blame] | 19 | - name: "{{ pod_sshkey_name }}" |
| Zack Williams | ba5549c | 2017-03-25 15:04:45 -0700 | [diff] [blame] | 20 | |
| 21 | ssh_host_genkeys: [] |
| 22 | |