ansible/roles/ssh_known_hosts/templates/ssh/ssh_known_hosts.j2

8 lines
548 B
Django/Jinja

{% for host in groups["server"] | sort %}
{% for keytype in ['ecdsa', 'rsa', 'ed25519'] %}
{% if 'ssh_host_key_{}_public'.format(keytype) in hostvars[host]['ansible_facts'].keys() %}
{{ query('ldap', 'all_cn', hostvars[host]['ansible_facts']['hostname']) | join(',') }},{{ query('ldap', 'all_ip', hostvars[host]['ansible_facts']['hostname']) | join(',') }} ssh-{{ keytype }} {{ hostvars[host]['ansible_facts']['ssh_host_key_{}_public'.format(keytype)] }} root@{{ hostvars[host]['ansible_facts']['hostname'] }}
{% endif %}
{% endfor %}
{% endfor %}