Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

aws_cloud: don't hack the keys more

Browse source 
This is done by basessh role.
This commit is contained in:
Pavel Raiskup 2020-02-21 11:45:24 +01:00 • committed by Pierre-Yves Chibon
parent ae21353b07
commit 7c98df7a75
1 changed files with 10 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

22
tasks/aws_cloud.yml
View file

@ -94,19 +94,17 @@
### pause: seconds=30 ### pause: seconds=30
### when: host_is_up is failed ### when: host_is_up is failed
- name: gather ssh host key from new instance ### - name: gather ssh host key from new instance
local_action: command ssh-keyscan -t rsa {{ inventory_hostname }} ### local_action: command ssh-keyscan -t rsa {{ inventory_hostname }}
### ignore_errors: True ### ignore_errors: True
register: hostkey ### register: hostkey
when: birthday is defined
### when: host_is_up is failed ### when: host_is_up is failed
###
- name: add new ssh host key (until we can sign it) ### - name: add new ssh host key (until we can sign it)
local_action: known_hosts path={{item}} key="{{ hostkey.stdout }}" host={{ inventory_hostname }} state=present ### local_action: known_hosts path={{item}} key="{{ hostkey.stdout }}" host={{ inventory_hostname }} state=present
### ignore_errors: True ### ignore_errors: True
with_items: ### with_items:
- /root/.ssh/known_hosts ### - /root/.ssh/known_hosts
when: birthday is defined
### when: host_is_up is failed ### when: host_is_up is failed
# #