---
# ssh_ca_onboard.yml — fleet SSH certificate CA rollout [#385]
# Targets: sectestbed wave first (compliance lab #379), then prod under CR.
- name: Onboard hosts to the fleet SSH certificate CA
  hosts: all
  gather_facts: false
  roles:
    - ssh_ca