support for arbitrary number of CA key pair

tasks/main.yml

@@ -16,26 +16,16 @@
     path: "{{ ssh_ca_dir }}/keys"
     state: directory
 
-- name: Copy user CA private key
+- name: Copy private keys
   copy:
-    dest: "{{ ssh_ca_dir }}/keys/user_ca"
-    content: "{{ ssh_ca_user_ca_private_key }}"
+    dest: "{{ ssh_ca_dir }}/keys/{{ item.name }}"
+    content: "{{ item.private_key }}"
     mode: 0600
+  with_items: "{{ ssh_ca_key_pairs }}"
 
-- name: Copy host CA private key
+- name: Copy public keys
   copy:
-    dest: "{{ ssh_ca_dir }}/keys/host_ca"
-    content: "{{ ssh_ca_host_ca_private_key }}"
-    mode: 0600
-
-- name: Copy user CA public key
-  copy:
-    dest: "{{ ssh_ca_dir }}/keys/user_ca.pub"
-    content: "{{ ssh_ca_user_ca_public_key }}"
-    mode: 0644
-
-- name: Copy host CA public key
-  copy:
-    dest: "{{ ssh_ca_dir }}/keys/host_ca.pub"
-    content: "{{ ssh_ca_host_ca_public_key }}"
+    dest: "{{ ssh_ca_dir }}/keys/{{ item.name }}.pub"
+    content: "{{ item.public_key }}"
     mode: 0644
+  with_items: "{{ ssh_ca_key_pairs }}"