ghoneycutt / puppet-module-ssh

Puppet module to manage SSH
Other
34 stars 184 forks source link

Abbility to turn off auttomatic completion of /etc/ssh/ssk_known_hosts #295

Closed ggeldenhuis closed 5 years ago

ggeldenhuis commented 5 years ago

For bigger companies 10 000+ nodes having the ssh module automatically populate /etc/ssh/ssh_know_hosts file is not great behaviour. This really should be turned of by default and a user attribute provided to turn on this behaviour. I can't currently see any flag that would allow you to easily turn off this behaviour.

defenestration commented 5 years ago

It looks like ssh::ssh_key_import: false will disable the module from populating the ssh_known_hosts file.

ghoneycutt commented 5 years ago

Thanks!