From d1a6770e04b38c6ec1988edefe1f7d7e04a38beb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timo=20M=C3=A4kinen?= <tmakinen@foo.sh>
Date: Wed, 27 Nov 2024 17:19:21 +0200
Subject: [PATCH] ssh_known_hosts: Initial version

---
 ssh_known_hosts/files/ssh_known_hosts | 1 +
 ssh_known_hosts/tasks/main.yml        | 8 ++++++++
 2 files changed, 9 insertions(+)
 create mode 100644 ssh_known_hosts/files/ssh_known_hosts
 create mode 100644 ssh_known_hosts/tasks/main.yml

diff --git a/ssh_known_hosts/files/ssh_known_hosts b/ssh_known_hosts/files/ssh_known_hosts
new file mode 100644
index 0000000..e3ba73c
--- /dev/null
+++ b/ssh_known_hosts/files/ssh_known_hosts
@@ -0,0 +1 @@
+@cert-authority *.foo.sh ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBMPviopeMpN5gKKlL729fQVoZM13BUKEmo1VO8S4PDi
diff --git a/ssh_known_hosts/tasks/main.yml b/ssh_known_hosts/tasks/main.yml
new file mode 100644
index 0000000..27bbc53
--- /dev/null
+++ b/ssh_known_hosts/tasks/main.yml
@@ -0,0 +1,8 @@
+---
+- name: Create global SSH known_hosts
+  ansible.builtin.copy:
+    dest: /etc/ssh/ssh_known_hosts
+    src: ssh_known_hosts
+    mode: "0644"
+    owner: root
+    group: "{{ ansible_wheel }}"