Closed MathiasRenner closed 7 years ago
Well, that of course depends which kind of ssh key you are using. A DSA is also a perfectly valid choice for a key ;-). The error indeed is, that its hardcoded to .dsa
and should be more flexible, maybe even by copying every pub key found over to the pis.
This was new for me, thanks for the info :)
I don't know how easy it is to implement your idea (copying all keys). I found this module, which allows to create a new key if it does not exist. Drawback: You can specify DSA or RSA only exclusively.
This probably works, but I won't take the time to look further into this issue.
This seems to be relevant:
http://security.stackexchange.com/questions/112802/why-openssh-deprecated-dsa-keys
If dsa gets deprecated, I would be better to use id_rsa
instead of id_dsa
.
You are all right, just switched to id_dsa with the latest update (which btw now uses kubeadm
and Kubernetes 1.5.1)
When running the basic setup with
... Ansible throws this error without this fix:
This PR fixes the error.