ssh-certs hosts.

playbooks/ssh-certs/deploy-host-certs.yml

@@ -13,7 +13,15 @@
       file:
         path: "/tmp/ssh_host_certs/{{ inventory_hostname }}"
         state: directory
-        mode: '0700'
+        mode: '0755'
+
+    - name: Локальная генерация временной пары ключей на Ansible-машине
+      delegate_to: localhost
+      become: no
+      openssh_keypair:
+        path: "/tmp/ssh_host_certs/{{ inventory_hostname }}/ssh_host_ed25519_key"
+        type: ed25519
+        state: present
 
     - name: Удаленный выпуск Хост-сертификата силами step-ca
       delegate_to: localhost