From 5e745e45076c9c58c7edfb6ea60351e9f438a8cc Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@unkin.net>
Date: Sat, 3 Oct 2026 20:46:44 +1000
Subject: [PATCH] add dum0 ip to prodnxsr0020 ssh host cert principals

---
 hieradata/nodes/prodnxsr0020.main.unkin.net.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hieradata/nodes/prodnxsr0020.main.unkin.net.yaml b/hieradata/nodes/prodnxsr0020.main.unkin.net.yaml
index 9ac160e..4d58a76 100644
--- a/hieradata/nodes/prodnxsr0020.main.unkin.net.yaml
+++ b/hieradata/nodes/prodnxsr0020.main.unkin.net.yaml
@@ -29,6 +29,8 @@ ssh::server::options:
     - "--%{facts.networking.ip}"
     - 127.0.0.1
     - "%{hiera('networking_loopback0_ip')}"
+profiles::ssh::sign::principals:
+  - "%{hiera('networking_loopback0_ip')}"
 
 # frrouting
 frrouting::ospfd_router_id: "%{hiera('networking_loopback0_ip')}"