mrcharles
88e3f40331
ci / audit (push) Successful in 46s
Idempotent role: install fleet User CA public key + TrustedUserCAKeys drop-in, validate sshd -t, reload. Sectestbed wave first, prod under CR. https://projects.knownelement.com/issues/385
7 lines
274 B
YAML
7 lines
274 B
YAML
---
|
|
# ssh_ca role defaults [#385]
|
|
ssh_ca_key_src: fleet_user_ca.pub # role file (public key only)
|
|
ssh_ca_key_dest: /etc/ssh/fleet_user_ca.pub
|
|
ssh_ca_dropin: /etc/ssh/sshd_config.d/99-fleet-ca.conf
|
|
ssh_ca_trusted_line: "TrustedUserCAKeys /etc/ssh/fleet_user_ca.pub"
|