kita-pro/users.yaml

---

- hosts:
    - servers
    - desktops
    - laptops
  remote_user: root
  roles:
    - name: users

- hosts: desktops:laptops
  remote_user: root
  tasks:
    - name: /etc/ssh/ssh_config
      template:
        src: ssh_config.j2
        dest: /etc/ssh/ssh_config
    - name: ssh known hosts
      known_hosts:
        name: "{{item}}"
        key: "{{item}},{{hostvars[item].ansible_all_ipv4_addresses|join(',')}},{{hostvars[item].ansible_all_ipv6_addresses|join(',')}} {{hostvars[item].ansible_ssh_host_key_ed25519_public_keytype}} {{hostvars[item].ansible_ssh_host_key_ed25519_public}}"
        path: /etc/ssh/ssh_known_hosts
      loop: "{{groups.servers}}"

- hosts:
    - servers
  remote_user: root
  tasks:

    - name: authorize ssh public keys
      authorized_key:
        user: "{{item.name}}"
        key: "{{item.ssh_public_key}}"
      loop: "{{ hostvars | json_query(\"*.user_ssh_keys_info.results[]\") }}"
      loop_control:
        label: "{{ item.name }}"