zuul
/
zuul-jobs
Code Issues Proposed changes
zuul-jobs/roles/add-build-sshkey
History
Tristan Cacqueray fc90276349 add-build-sshkey: remove previously authorized build-sshkey 
This change improves the add-build-sshkey role to be usable for
static node where we need to clean-up previously added build-sshkey.

Change-Id: Ibcb2880deea4f7e51de51d6df11afc1de3fa4571
 		2019-05-20 13:23:02 +00:00
..
library Fix noqa warning 2018-10-28 14:31:23 +01:00
tasks add-build-sshkey: remove previously authorized build-sshkey 2019-05-20 13:23:02 +00:00
vars add-build-sshkey: remove previously authorized build-sshkey 2019-05-20 13:23:02 +00:00
README.rst add-build-sshkey: remove previously authorized build-sshkey 2019-05-20 13:23:02 +00:00
__init__.py add-build-sshkey: Remove only the master key 2018-09-05 09:26:35 -07:00

README.rst

Generate and install a build-local SSH key on all hosts

This role is intended to be run on the Zuul Executor at the start of every job. It generates an SSH keypair and installs the public key in the authorized_keys file of every host in the inventory. It then removes the Zuul master key from this job's SSH agent so that the original key used to log into all of the hosts is no longer accessible (any per-project keys, if present, remain available), then adds the newly generated private key.

Role Variables

Where to put the newly-generated SSH private key.