ansible-role-ssh_host_key/tasks/scan.yml

---

- name: scan ssh host
  local_action: command ssh-keyscan -t {{ssh_host_key_type}} {{ansible_host}}
  register: _ssh_keyscan_result
  changed_when: false

- name: set ssh_host_key_ed25519_public
  set_fact:
    ssh_host_key_ed25519_public: "{{ _ssh_keyscan_result.stdout.split()[2] }}"
  changed_when: ssh_host_key_ed25519_public != _ssh_keyscan_result.stdout.split()[2]
  when: ssh_host_key_type == "ed25519"