deploy a valid /etc/ssh/ssh_known_hosts for all nodes (requires new leap_cli)

1 files changed, 11 insertions, 0 deletions

diff --git a/puppet/modules/site_sshd/manifests/known_hosts.pp b/puppet/modules/site_sshd/manifests/known_hosts.pp
new file mode 100644
index 00000000..290ffd0b
--- /dev/null
+++ b/puppet/modules/site_sshd/manifests/known_hosts.pp
@@ -0,0 +1,11 @@
+class site_sshd::known_hosts ($hosts) {
+  # these owner and permissions seem odd to me, but it is what is defined
+  # in modules/sshd/manifests/client/base.pp, so we are going to stick with it.
+  file { '/etc/ssh/ssh_known_hosts':
+    ensure  => present,
+    owner   => root,
+    group   => 0,
+    mode    => '0644',
+    content => template('site_sshd/ssh_known_hosts.erb');
+  }
+}