Automagically create known_hosts entries with Puppet

known_hosts.pp

# This example shows how to automatically populate the SSH known_hosts file
# on a node so that SSH'ing to the node won't ask you to verify it's fingerprint.
# This requires a version of Facter that uses structure facts.

# Node 'foo' exports its public HOST KEY.
node 'foo' {

  @@sshkey { $::clientcert:
    ensure       => present,
    host_aliases => [$::ipaddress],
    key          => $::ssh['rsa']['key'],
    type         => 'rsa',
    tag          => 'foobar',
  }

}

# Node 'bar' collects all exported HOST KEYS.
node 'bar' {

  Sshkey <<| tag == 'foobar' |>>

}