[#385] ssh_ca role + onboarding playbook (fleet SSH cert CA rollout)

Idempotent role: install fleet User CA public key + TrustedUserCAKeys drop-in, validate sshd -t, reload. Sectestbed wave first, prod under CR. https://projects.knownelement.com/issues/385
2026-09-05 17:11:12 -05:00
parent 3815aee578
commit 88e3f40331
6 changed files with 53 additions and 1 deletions
@@ -0,0 +1,12 @@
+---
+galaxy_info:
+  author: KNEL OAM lane
+  description: Onboard host to the fleet SSH certificate CA (TrustedUserCAKeys)
+  license: AGPL-3.0-or-later
+  min_ansible_version: "2.14"
+  platforms:
+    - name: Debian
+      versions: [bookworm, trixie]
+    - name: Ubuntu
+      versions: [noble]
+dependencies: []