Should happen before whenever OpenSSH upstream deprecates `ssh-rsa` (see parent T253824)
Currently-running versions:
Routers:
|name|OpenSSH version|status|
|---|---|---|
|cr1-codfw|SSH-2.0-OpenSSH_6.9||
|cr1-eqiad|SSH-2.0-OpenSSH_6.9||
|cr1-eqsin|SSH-2.0-OpenSSH_7.3|{icon check color=green}|
|cr2-codfw|SSH-2.0-OpenSSH_6.9||
|cr2-eqdfw|SSH-2.0-OpenSSH_7.5|{icon check color=green}|
|cr2-eqiad|SSH-2.0-OpenSSH_6.9||
|cr2-eqord|SSH-2.0-OpenSSH_7.5|{icon check color=green}|
|cr2-eqsin|SSH-2.0-OpenSSH_7.5|{icon check color=green}|
|cr2-esams|SSH-2.0-OpenSSH_6.9||
|cr3-esams|SSH-2.0-OpenSSH_6.6.1||
|cr3-knams|SSH-2.0-OpenSSH_7.5|{icon check color=green}|
|cr3-ulsfo|SSH-2.0-OpenSSH_7.5|{icon check color=green}|
|cr4-ulsfo|SSH-2.0-OpenSSH_7.5|{icon check color=green}|
|mr1-codfw|SSH-2.0-OpenSSH_6.6||
|mr1-eqiad|SSH-2.0-OpenSSH_6.6||
|mr1-eqsin|SSH-2.0-OpenSSH_6.6||
|mr1-esams|SSH-2.0-OpenSSH_7.4|{icon check color=green}|
|mr1-ulsfo|SSH-2.0-OpenSSH_6.6||
Switches:
|fasw-c-codfw|SSH-2.0-OpenSSH_6.1||
|fasw-c-eqiad|SSH-2.0-OpenSSH_6.4||
|msw1-codfw|SSH-2.0-OpenSSH_7.2|{icon check color=green}|
|msw1-eqiad|SSH-2.0-OpenSSH_6.0|T225121|
|asw1-eqsin|SSH-2.0-OpenSSH_6.4||
|asw2-a-eqiad|SSH-2.0-OpenSSH_6.9||
|asw2-b-eqiad|SSH-2.0-OpenSSH_6.4||
|asw2-c-eqiad|SSH-2.0-OpenSSH_6.4||
|asw2-d-eqiad|SSH-2.0-OpenSSH_6.4||
|asw2-esams|SSH-2.0-OpenSSH_7.3|{icon check color=green}|
|asw2-ulsfo|SSH-2.0-OpenSSH_6.4||
|asw-a-codfw|SSH-2.0-OpenSSH_6.4||
|asw-b-codfw|SSH-2.0-OpenSSH_6.4||
|asw-c-codfw|SSH-2.0-OpenSSH_6.4||
|asw-d-codfw|SSH-2.0-OpenSSH_6.4||
So 24/33 devices need an upgrade.