zuul-jobs

History

Sorin Sbarnea ad3167bd56 Fixes all tasks should be named rule This prepared for ansible-lint v5 which no longer has exceptions for task naming, requiring all to be named. Change-Id: I5e761d1e3836fa270d7afdcf01780320001f820d Part-Of: #773245		2021-03-08 13:30:32 +00:00
..
tasks	Fixes all tasks should be named rule	2021-03-08 13:30:32 +00:00
vars	Use main.yaml, not .yml	2020-04-20 17:44:49 +02:00
README.rst	add-build-sshkey: remove previously authorized build-sshkey	2019-05-20 13:23:02 +00:00

README.rst

Generate and install a build-local SSH key on all hosts

This role is intended to be run on the Zuul Executor at the start of every job. It generates an SSH keypair and installs the public key in the authorized_keys file of every host in the inventory. It then removes the Zuul master key from this job's SSH agent so that the original key used to log into all of the hosts is no longer accessible (any per-project keys, if present, remain available), then adds the newly generated private key.

Role Variables

Where to put the newly-generated SSH private key.