| Zack Williams | ba5549c | 2017-03-25 15:04:45 -0700 | [diff] [blame] | 1 | --- |
| 2 | # ssh-pki/tasks/main.yml |
| 3 | |
| Zack Williams | 44845c6 | 2017-04-21 13:57:14 -0700 | [diff] [blame] | 4 | ssh_pki_dir: "{{ playbook_dir }}/ssh_pki" |
| 5 | credentials_dir: "{{ playbook_dir }}/credentials" |
| Zack Williams | ba5549c | 2017-03-25 15:04:45 -0700 | [diff] [blame] | 6 | |
| 7 | # password on SSH CA |
| 8 | ssh_ca_phrase: "{{ lookup('password', credentials_dir ~ '/ssh_ca_phrase length=64') }}" |
| 9 | |
| 10 | # ssh-keygen parameters |
| 11 | ssh_keytype: rsa |
| 12 | ssh_keysize: 4096 |
| 13 | |
| 14 | # lists of keys to generate |
| 15 | ssh_client_genkeys: |
| 16 | - name: headnode |
| 17 | |
| 18 | ssh_host_genkeys: [] |
| 19 | |