Allow setting additional hostnames

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

inventory/group_vars/all

@@ -236,6 +236,9 @@ ipa_admin_password: "{{ ipa_prod_admin_password }}"
 # Normal default sshd port is 22
 sshd_port: 22
 
+# List of names under which the host is available
+ssh_hostnames: []
+
 # assume collectd apache
 collectd_apache: true
 

inventory/host_vars/pkgs01.stg.phx2.fedoraproject.org

@@ -10,5 +10,8 @@ volgroup: /dev/vg_virthost16
 vmhost: virthost16.phx2.fedoraproject.org
 datacenter: phx2
 
+ssh_hostnames:
+- pkgs.stg.fedoraproject.org
+
 # Need a eth0/eth1 install here.
 virt_install_command: "{{ virt_install_command_two_nic }}"

roles/base/tasks/sshcerts.yml

@@ -82,8 +82,8 @@
 
 - name: Set some extra signing facts
   set_fact:
-    sign_hostnames: "{{inventory_hostname}}"
-    sign_validity: "-1h:+2w"
+    sign_hostnames: "[ '{{inventory_hostname}}' ] + ssh_hostnames | join(',')"
+    sign_validity: "-1h:+1y"
   when: env == "staging"
   tags:
   - sshd_config