feat(ssh_host_keys): add role for managing SSH host keys

• Ensure the /tmp/ssh_keys directory exists.
• Download SSH host keys from S3 and unpack them to /etc/ssh.
• Restart the SSH service to apply the new keys.
• Add necessary variables for S3 and AWS credentials in groupvars/all.
• Include ssh_host_keys role in cluster.yml playbook.

ansible/group_vars/all

@@ -28,8 +28,37 @@
   ldap_uri: "ldap://ldapserver"
 
 # nfs_mounts related
+  enable_nfs_mounts: true
   use_autofs: false
   mount_points:
-    - /gpfs4
-    - /gpfs5
+    - { "src": "master:/gpfs4", "path": "/gpfs4", "opts": "ro,sync,hard", "mode": "0755" }
+    - { "src": "master:/gpfs5", "path": "/gpfs5", "opts": "ro,sync,hard", "mode": "0755" }
 
+#SSH Host Keys
+  S3_ENDPOINT: ""
+  SSH_HOST_KEYS_S3_BUCKET: ""
+  SSH_HOST_KEYS_S3_OBJECT: ""
+
+# AWS credentials
+  LTS_ACCESS_KEY: ""
+  LTS_SECRET_KEY: ""
+
+# ssh proxy
+  enable_ssh_proxy_config: false
+  sshpiper_dest_dir: "/opt/sshpiper"
+  fail2ban_cidr_list: "127.0.0.1/8"
+
+# rsyslog
+  enable_rsyslog_config: false
+  rsyslog_target: "*.* @master:514"
+
+# ssl certs
+  enable_ssl_certs: false
+  ssl_cert_s3_bucket: ""
+  ssl_cert_key_location: "/etc/pki/tls/private"
+  ssl_cert_file_location: "/etc/pki/tls/certs"
+  ssl_cert_key: ""
+  ssl_cert_file: ""
+  ssl_cert_chain_file: ""
+  ssl_apache_config: ""
+  apache_service: "httpd"