Support #385
Updated by Charles N 1 day ago
Parent/umbrella: #311 (OAM - Security Hardening Auditing and Compliance). Migrate from static SSH keys to signed SSH certificates issued by the tsys-ca CA. ## Scope - [ ] Configure tsys-ca as SSH certificate authority - [ ] Issue signed SSH certificates replacing static keys - [ ] Configure hosts to trust the tsys-ca CA - [ ] Validate in sectestbed-* before prod ## Context - Depends on the tsys-ca CA infrastructure (#342). - Roles executed via tsys-awx (AWX). ## Dependencies Depends on #342 (tsys-ca VM + HSM CA + ACME), #379 #1 (test lab).