From 821e688bbebb0dccd3ec427f019f383256cddb56 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Thu, 13 Aug 2026 14:30:10 +0100 Subject: [PATCH] Added readme for galaxy req Signed-off-by: Mark Bolwell --- CHANGELOG.md | 4 ++++ roles/ssh_key_rotation/README.md | 17 +++++++++++++++++ 2 files changed, 21 insertions(+) create mode 100644 roles/ssh_key_rotation/README.md diff --git a/CHANGELOG.md b/CHANGELOG.md index d4c8260..576a222 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## [0.9.1] - 2026-08-13 + +Added role README.md to satiffy galaxy collection requirements + ## [0.9.0] - 2026-08-11 First release. Nothing was published before this, so the entries below record how the diff --git a/roles/ssh_key_rotation/README.md b/roles/ssh_key_rotation/README.md new file mode 100644 index 0000000..85d7986 --- /dev/null +++ b/roles/ssh_key_rotation/README.md @@ -0,0 +1,17 @@ +# ssh_key_rotation + +Three-phase SSH key rotation with safety gates. The new key is +installed and proven to authenticate before the old key is removed. + +This role has no `tasks/main.yml` entry point, because each stage +authenticates differently. Include it with an explicit `tasks_from`: + +| `tasks_from` | Runs on | Connects with | +| ---------------------- | ------------ | ------------- | +| `validate` | control node | n/a (local) | +| `install` | target | old key | +| `verify` | target | new key | + +See `playbooks/rotate.yml` for the three plays wired together, and +the [collection README](../../README.md) for variables, PQC options +and troubleshooting.