generate_ssh_keys.yaml

---
- file:
    path: "{{ ansible_env.HOME }}/.ssh"
    state: directory
    mode: 0700

- openssh_keypair:
   path: "{{ ansible_env.HOME }}/.ssh/helper_rsa"
   size: 4096
   comment: "{{ ansible_env.USER }}@helper"
   state: present

- blockinfile:
    path: "{{ ansible_env.HOME }}/.ssh/config"
    state: present
    backup: yes
    create: yes
    marker: "# {mark} {{ item.name }} MANAGED BLOCK"
    block: |
      Host {{ item.name }}
        HostName %h.{{ dns.clusterid }}.{{ dns.domain }}
        User core
        IdentityFile {{ ansible_env.HOME }}/.ssh/helper_rsa
      Host {{ item.name }}.{{ dns.clusterid }}.{{ dns.domain }}
        User core
        IdentityFile {{ ansible_env.HOME }}/.ssh/helper_rsa
  loop: "{{ masters + workers }}"

- blockinfile:
    path: "{{ ansible_env.HOME }}/.ssh/config"
    state: present
    backup: yes
    create: yes
    marker: "# {mark} {{ item.name }} MANAGED BLOCK"
    block: |
      Host {{ item.name }}
        HostName %h.{{ dns.clusterid }}.{{ dns.domain }}
        User core
        IdentityFile {{ ansible_env.HOME }}/.ssh/helper_rsa
      Host {{ item.name }}.{{ dns.clusterid }}.{{ dns.domain }}
        User core
        IdentityFile {{ ansible_env.HOME }}/.ssh/helper_rsa
  loop: 
    - name: "{{ bootstrap.name }}"