diff --git a/ssh_known_hosts/files/ssh_known_hosts b/ssh_known_hosts/files/ssh_known_hosts
new file mode 100644
index 0000000..e3ba73c
--- /dev/null
+++ b/ssh_known_hosts/files/ssh_known_hosts
@@ -0,0 +1 @@
+@cert-authority *.foo.sh ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBMPviopeMpN5gKKlL729fQVoZM13BUKEmo1VO8S4PDi
diff --git a/ssh_known_hosts/tasks/main.yml b/ssh_known_hosts/tasks/main.yml
new file mode 100644
index 0000000..27bbc53
--- /dev/null
+++ b/ssh_known_hosts/tasks/main.yml
@@ -0,0 +1,8 @@
+---
+- name: Create global SSH known_hosts
+  ansible.builtin.copy:
+    dest: /etc/ssh/ssh_known_hosts
+    src: ssh_known_hosts
+    mode: "0644"
+    owner: root
+    group: "{{ ansible_wheel }}"