Ansible Playbook for generating and adding SSH certificates for a user on remote hosts

generate_ssh_certs.yml

---
- name: Set up sshcerts for ianl
  hosts: all
  remote_user: ianl

  tasks:
   - name: Generate a unique key for each host
     local_action: command /usr/bin/ssh-keygen -b 2048 -t rsa -f /home/ianl/sshkeys/{{ inventory_hostname }} -q -N ""
     become: no

   - name: Create ~/.ssh directory
     file: path=/home/ianl/.ssh state=directory owner=ianl group=ianl mode=0700 recurse=yes

   - name: Add ssh key to user
     authorized_key: user=ianl
                     key="{{ lookup('file', '/home/ianl/sshkeys/'+inventory_hostname+'.pub') }}"
                     state=present