module-sshd/manifests/client/base.pp

class sshd::client::base {
  # this is needed because the gid might have changed
  file { '/etc/ssh/ssh_known_hosts':
    mode => 0644, owner => root, group => 0;
  }

  # Now collect all server keys
  case $sshd::client::shared_ip {
    no:  { Sshkey <<||>> }
    yes: { Sshkey <<| tag == "fqdn" |>> }
  }
}