summaryrefslogtreecommitdiffstats
path: root/roles/ssh/meta/argument_specs.yml
diff options
context:
space:
mode:
authorAhmed Abdelhalim <[email protected]>2026-07-26 00:58:07 +0200
committerAhmed Abdelhalim <[email protected]>2026-07-26 00:58:07 +0200
commit87c598e0adb88581982bfa59375bdd1a7fe53969 (patch)
treebfe95b93f828c8ff486223ee751cdc7664cf2c20 /roles/ssh/meta/argument_specs.yml
parentd3d8d2872b87d9888f2264959ea48874522334cd (diff)
Change the ssh role to only inject pre-generated keys
Co-Authored-By: Claude.ai
Diffstat (limited to 'roles/ssh/meta/argument_specs.yml')
-rw-r--r--roles/ssh/meta/argument_specs.yml8
1 files changed, 8 insertions, 0 deletions
diff --git a/roles/ssh/meta/argument_specs.yml b/roles/ssh/meta/argument_specs.yml
index 43aa0d43..81ab218f 100644
--- a/roles/ssh/meta/argument_specs.yml
+++ b/roles/ssh/meta/argument_specs.yml
@@ -16,3 +16,11 @@ argument_specs:
elements: "str"
required: false
description: "List of SSH known_hosts entries in 'hostname keytype keydata' format"
+ ssh_private_key:
+ type: "str"
+ required: true
+ description: "Pre-generated Ed25519 host private key (OpenSSH format), unique per host"
+ ssh_public_key:
+ type: "str"
+ required: true
+ description: "Pre-generated Ed25519 host public key matching ssh_private_key"