ssh-certs hosts.

2026-05-21 02:26:42 +10:00
parent c1c221cda8
commit 2d39618a6f
1 changed files with 9 additions and 1 deletions
--- a/playbooks/ssh-certs/deploy-host-certs.yml
+++ b/playbooks/ssh-certs/deploy-host-certs.yml
@@ -13,7 +13,15 @@
      file:
        path: "/tmp/ssh_host_certs/{{ inventory_hostname }}"
        state: directory
-        mode: '0700'
+        mode: '0755'
+
+    - name: Локальная генерация временной пары ключей на Ansible-машине
+      delegate_to: localhost
+      become: no
+      openssh_keypair:
+        path: "/tmp/ssh_host_certs/{{ inventory_hostname }}/ssh_host_ed25519_key"
+        type: ed25519
+        state: present

    - name: Удаленный выпуск Хост-сертификата силами step-ca
      delegate_to: localhost