bundles/jenkins-ci: add ssh keys and config

bundles/jenkins-ci/files/ssh-config

@@ -0,0 +1,3 @@
+Host *
+    UserKnownHostsFile /dev/null
+    StrictHostKeyChecking no

bundles/jenkins-ci/items.py

@@ -6,6 +6,11 @@ directories = {
             'pkg_apt:jenkins',
         },
     },
+    '/var/lib/jenkins/.ssh': {
+        'mode': '0755',
+        'owner': 'git',
+        'group': 'git',
+    },
 }
 
 files = {
@@ -14,8 +19,19 @@ files = {
             'svc_systemd:jenkins:restart',
         },
     },
+    '/var/lib/jenkins/.ssh/config': {
+        'source': 'ssh-config',
+    },
 }
 
+if node.metadata.get('jenkins-ci/install_ssh_key', False):
+    files['/var/lib/jenkins/.ssh/id_ed25519'] = {
+        'content': repo.vault.decrypt_file(f'jenkins-ci/files/ssh-keys/{node.name}.key.vault'),
+        'mode': '0600',
+        'owner': 'jenkins',
+        'group': 'jenkins',
+    }
+
 svc_systemd = {
     'jenkins': {
         'needs': {