feat(ssh_known_hosts): allow to omit IP addresses

This commit is contained in:
alxwr
2020-01-20 18:44:46 +00:00
committed by Imran Iqbal
parent dfaeb8f505
commit ea221ab52b
4 changed files with 34 additions and 6 deletions
+15 -2
View File
@@ -117,7 +117,7 @@ setup those functions through pillar::
public_ssh_host_keys:
mine_function: cmd.run
cmd: cat /etc/ssh/ssh_host_*_key.pub
python_shell: True
python_shell: true
public_ssh_hostname:
mine_function: grains.get
key: id
@@ -210,7 +210,20 @@ To **include localhost** and local IP addresses (``127.0.0.1`` and ``::1``) use
openssh:
known_hosts:
include_localhost: True
include_localhost: true
To prevent ever-changing IP addresses from being added to a host, use this::
openssh:
known_hosts:
omit_ip_address:
- my.host.tld
To completely disable adding IP addresses::
openssh:
known_hosts:
omit_ip_address: true
``openssh.moduli``
^^^^^^^^^^^^^^^^^^