puppet collectors plus own data

27 views
Skip to first unread message

Thomas Polnik

unread,
Jul 20, 2015, 12:00:09 PM7/20/15
to puppet...@googlegroups.com
Hi,

I am using saz/ssh [1], it works fine with exported resources (host keys) and autogenerated /etc/ssh/ssh_known_hosts ... But I did not find any solution to add host keys from systems, where puppet is not installed (it is needed in my case).

Is there any possibility to add any own hostkeys into /etc/ssh/ssh_known_hosts, if I am using exported resources? [2]


 

Best regards,
thomas.

[1] https://forge.puppetlabs.com/saz/ssh
[2] https://docs.puppetlabs.com/puppet/latest/reference/lang_exported.html

Thomas Müller

unread,
Jul 21, 2015, 5:25:25 AM7/21/15
to puppet...@googlegroups.com
Hi thomas

Saz/ssh seems to use the standard sshkey type to export the host keys. Code: https://github.com/saz/puppet-ssh/blob/master/manifests/hostkeys.pp

Seems you can export the non-puppet managed keys on a puppet managed node to get it distributed.

Thomas

jcbollinger

unread,
Jul 21, 2015, 1:15:23 PM7/21/15
to puppet...@googlegroups.com


On Tuesday, July 21, 2015 at 12:25:25 AM UTC-5, Thomas Müller wrote:

Saz/ssh seems to use the standard sshkey type to export the host keys. Code: https://github.com/saz/puppet-ssh/blob/master/manifests/hostkeys.pp

Seems you can export the non-puppet managed keys on a puppet managed node to get it distributed.



Or in the likely event that there is no particular machine that can logically be considered to "own" these unmanaged machines for this purpose, you can simply declare their Sshkey resources concretely, on every node.  Create a class for this purpose, and put all the data in Hiera.  Ensure that the class is declared on every node.


John

Reply all
Reply to author
Forward
0 new messages