marcus-grant/infra

Add a remove task to remove old known hosts of the given list before adding new ones

Opened this issue · 0 comments

There can be problems if adding known hosts for a new SSH keyfile of the same name without first deleting old entries. SSH reads this as a potential attack and will give warning messages. Evaluate if this is a worthwhile concern for the ssh_keygen role and if so add the remove known_hosts task before the add known hosts task.