zuul-jobs

History

Albin Vass a7faab5819 add-build-sshkey: Ensure .ssh exists, enable admin authorized_keys Change-Id: I54608635711a4936ce01c3859706236627d80af9		2020-07-09 21:05:12 +02:00
..
tasks	add-build-sshkey: Ensure .ssh exists, enable admin authorized_keys	2020-07-09 21:05:12 +02:00
vars	Use main.yaml, not .yml	2020-04-20 17:44:49 +02:00
README.rst	add-build-sshkey: remove previously authorized build-sshkey	2019-05-20 13:23:02 +00:00

README.rst

Generate and install a build-local SSH key on all hosts

This role is intended to be run on the Zuul Executor at the start of every job. It generates an SSH keypair and installs the public key in the authorized_keys file of every host in the inventory. It then removes the Zuul master key from this job's SSH agent so that the original key used to log into all of the hosts is no longer accessible (any per-project keys, if present, remain available), then adds the newly generated private key.

Role Variables

Where to put the newly-generated SSH private key.