Exchange SSH user and host keys using Puppet

master.pp

 class mybase::jenkins::master {
   Sshkey <<| tag == 'jenkinsslave' |>>
 }

slave.pp

# using https://forge.puppet.com/jtopjian/sshkeys
class mybase::jenkins::slave($allowed_users = []) {
  @@sshkey { $fqdn:
    ensure => present,
    type   => "rsa",
    key    => $sshrsakey,
    tag    => 'jenkinsslave',
  }
  ensure_resource('mybase::jenkins::slave::user', $allowed_users, {})
}

define mybase::jenkins::slave::user($remoteuser = 'jenkins', $remotehost = 'jenkins.example.com') {
  sshkeys::set_authorized_key { "allow $remoteuser as $title":
    local_user  => $title,
    remote_user => "$remoteuser@$remotehost",
  }
}

Requires https://forge.puppet.com/jtopjian/sshkeys