zuul/zuul-jobs
Code Issues Proposed changes
b3f417a6e6
zuul-jobs/roles/add-build-sshkey/README.rst
Tristan Cacqueray fc90276349 add-build-sshkey: remove previously authorized build-sshkey 
This change improves the add-build-sshkey role to be usable for
static node where we need to clean-up previously added build-sshkey.

Change-Id: Ibcb2880deea4f7e51de51d6df11afc1de3fa4571
2019-05-20 13:23:02 +00:00

859 B
Raw Blame History

Generate and install a build-local SSH key on all hosts

This role is intended to be run on the Zuul Executor at the start of every job. It generates an SSH keypair and installs the public key in the authorized_keys file of every host in the inventory. It then removes the Zuul master key from this job's SSH agent so that the original key used to log into all of the hosts is no longer accessible (any per-project keys, if present, remain available), then adds the newly generated private key.

Role Variables

Where to put the newly-generated SSH private key.