Do not hash public keys

[chr4]

Hashes are different on each ssh-keyscan run, therefore filling up /etc/ssh/ssh_known hosts

An alternative would be, to only check for duplicate keys (not comments), but this would result in problems for hosts with multiple hostnames/ips.

[pniederlag]

this is a real show-stopper that should be improved/fixed.

[chr4]

Any news on this, dear Opscode? This should be affecting tons of users.

[hulu1522]

For those of you having an issue, the only way I could figure out to stop this was to use a "not_if" guard with the resource.

ssh_known_hosts_entry 'some.domain.com' do
  not_if "a=$(ssh-keyscan -H -t rsa some.domain.com | grep -Po '(AAAA.*)'); grep $a #{node['ssh_known_hosts']['file']}"
end

As long as that DNS name is reachable it will scan for the key and then check the file for the key. This is what worked for me but may not work for you. I figured I would post it anyways.