build

roles/vault_ssh_keys/tasks/main.yml

@@ -141,6 +141,17 @@
           {{ '{{' }} end {{ '}}' }}
           EOH
           }
+          template {
+            destination = "/home/ansible/.ssh/id_ed25519-cert.pub"
+            perms = "0644"
+            user = "ansible"
+            group = "ansible"
+            contents = <<EOH
+          {{ with secret "ssh/sign/admin" (printf "public_key=%s" (trimSpace (file "/home/ansible/.ssh/id_ed25519.pub"))) "valid_principals=ansible" }}
+          {{ .Data.signed_key }}
+          {{ end }}
+          EOH
+          }
         owner: root
         group: root
         mode: '0644'