016a20c0ff
A recent hotfix added a fallback zuul_ssh_key_algorithm value for the remove-build-sshkey role, reflect it in the role documentation. Also remove some redundancies with default values specified in prose for the add-build-sshkey role, when they were also indicated by the :default: parameter. Change-Id: If3f74256788283dedb17ad780da3ca4df4503cb4
1.3 KiB
1.3 KiB
Generate and install a build-local SSH key on all hosts
This role is intended to be run on the Zuul Executor at the start of every job. It generates an SSH keypair and installs the public key in the authorized_keys file of every host in the inventory. It then removes the Zuul master key from this job's SSH agent so that the original key used to log into all of the hosts is no longer accessible (any per-project keys, if present, remain available), then adds the newly generated private key.
Role Variables