zuul/zuul-jobs
Code Issues Proposed changes
4a04383076
zuul-jobs/roles/add-build-sshkey
History
Jeremy Stanley 016a20c0ff Document algorithm var for remove-build-sshkey 
A recent hotfix added a fallback zuul_ssh_key_algorithm value for
the remove-build-sshkey role, reflect it in the role documentation.

Also remove some redundancies with default values specified in prose
for the add-build-sshkey role, when they were also indicated by the
:default: parameter.

Change-Id: If3f74256788283dedb17ad780da3ca4df4503cb4
2021-04-01 15:29:01 +00:00
..
tasks Merge "Create a template for ssh-key and size" 2021-03-29 16:10:25 +00:00
vars Create a template for ssh-key and size 2021-03-17 09:54:45 -04:00
README.rst Document algorithm var for remove-build-sshkey 2021-04-01 15:29:01 +00:00

README.rst

Generate and install a build-local SSH key on all hosts

This role is intended to be run on the Zuul Executor at the start of every job. It generates an SSH keypair and installs the public key in the authorized_keys file of every host in the inventory. It then removes the Zuul master key from this job's SSH agent so that the original key used to log into all of the hosts is no longer accessible (any per-project keys, if present, remain available), then adds the newly generated private key.

Role Variables