From c60807239a9db0dcf51d2eed56181d0ef96ee658 Mon Sep 17 00:00:00 2001
From: jaydee <jaydee@sectorq.eu>
Date: Tue, 13 Oct 2026 01:14:46 +0200
Subject: [PATCH] build

---
 roles/vault_ssh_keys/tasks/main.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/roles/vault_ssh_keys/tasks/main.yml b/roles/vault_ssh_keys/tasks/main.yml
index 88edbe3..85843f7 100755
--- a/roles/vault_ssh_keys/tasks/main.yml
+++ b/roles/vault_ssh_keys/tasks/main.yml
@@ -141,6 +141,17 @@
           {{ '{{' }} end {{ '}}' }}
           EOH
           }
+          template {
+            destination = "/home/ansible/.ssh/id_ed25519-cert.pub"
+            perms = "0644"
+            user = "ansible"
+            group = "ansible"
+            contents = <<EOH
+          {{ with secret "ssh/sign/admin" (printf "public_key=%s" (trimSpace (file "/home/ansible/.ssh/id_ed25519.pub"))) "valid_principals=ansible" }}
+          {{ .Data.signed_key }}
+          {{ end }}
+          EOH
+          }
         owner: root
         group: root
         mode: '0644'