James E. Blair 0bf6e14720 Add commands to export/import keys to/from ZK ... This removes the filesystem-based keystore in favor of only using ZooKeeper. Zuul will no longer load missing keys from the filesystem, nor will it write out decrypted copies of all keys to the filesystem. This is more secure since it allows sites better control over when and where secret data are written to disk. To provide for system backups to aid in disaster recovery in the case that the ZK data store is lost, two new scheduler commands are added: * export-keys * import-keys These write the password-protected versions of the keys (in fact, a raw dump of the ZK data) to the filesystem, and read the same data back in. An administrator can invoke export-keys before performing a system backup, and run import-keys to restore the data. A minor doc change recommending the use of ``zuul-scheduler stop`` was added as well, since that section is being updated. Change-Id: I5e6ea37c94ab73ec6f850591871c4127118414ed		2021-07-22 08:07:22 -07:00
..
fixtures	Add commands to export/import keys to/from ZK	2021-07-22 08:07:22 -07:00
nodepool	Move parent provider determination to pipeline manager	2021-07-08 13:27:08 -07:00
remote	Fix zuul client and remote tests	2021-06-24 11:36:17 -07:00
unit	Add commands to export/import keys to/from ZK	2021-07-22 08:07:22 -07:00
zuul_client	Merge "Don't clear connection caches during full reconfig"	2021-07-09 16:40:05 +00:00
__init__.py	Add non-voting jobs.	2012-08-23 23:20:09 +00:00
base.py	Add commands to export/import keys to/from ZK	2021-07-22 08:07:22 -07:00
encrypt_secret.py	Make tests' encrypt_secret.py work with python3	2017-10-19 18:09:57 +00:00
fake_graphql.py	Fetch can-merge info when updating a pull-request	2020-09-23 12:03:55 +02:00
fakegithub.py	Save superfluous api requests in check run reporting	2020-11-04 08:52:28 +01:00
make_playbooks.py	Use libyaml if possible	2017-04-04 11:49:05 -07:00
print_layout.py	Do not add implied branch matchers in project-templates	2017-09-30 10:19:07 -07:00