zuul/zuul-jobs
Code Issues Proposed changes
c58e2a51dc
zuul-jobs/roles/add-build-sshkey/README.rst
James E. Blair 46389b5187 add-build-sshkey: Remove only the master key 
This implements a module to directly interact with the ssh-agent
so that the master key may be removed from the ssh-agent without
removing any per-project keys.

Change-Id: Ife91ad8afa9b41b0e779a832e298aca8d61ae98b
2018-09-05 09:26:35 -07:00

608 B
Raw Blame History

Generate and install a build-local SSH key on all hosts

This role is intended to be run on the Zuul Executor at the start of every job. It generates an SSH keypair and installs the public key in the authorized_keys file of every host in the inventory. It then removes the Zuul master key from this job's SSH agent so that the original key used to log into all of the hosts is no longer accessible (any per-project keys, if present, remain available), then adds the newly generated private key.

Role Variables

Where to put the newly-generated SSH private key.