panxiao81
88a02ababa
Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
11 lines
349 B
YAML
11 lines
349 B
YAML
---
|
|
# Make each host in the ssh_ca_trust group trust bao's SSH user CA (TrustedUserCAKeys),
|
|
# so it accepts the short-lived certs bao signs. Additive + validates before reload.
|
|
# ansible-playbook trust-ssh-ca.yml
|
|
- name: Trust the OpenBao SSH CA
|
|
hosts: ssh_ca_trust
|
|
become: true
|
|
gather_facts: false
|
|
roles:
|
|
- role: openbao_ssh_ca_trust
|