Dzahn has submitted this change and it was merged. (
https://gerrit.wikimedia.org/r/369958 )
Change subject: Gerrit: Add supplemental key to authorizedkeys
......................................................................
Gerrit: Add supplemental key to authorizedkeys
A supplemental key for use by scap from the deployment servers. This
change makes sshd_config aware of that key.
Change-Id: Ide6165e98189655eb54df3304452057718f36a6d
---
M hieradata/role/common/gerrit/server.yaml
1 file changed, 4 insertions(+), 0 deletions(-)
Approvals:
Paladox: Looks good to me, but someone else must approve
jenkins-bot: Verified
Dzahn: Looks good to me, approved
diff --git a/hieradata/role/common/gerrit/server.yaml
b/hieradata/role/common/gerrit/server.yaml
index 59e7938..0252f1d 100644
--- a/hieradata/role/common/gerrit/server.yaml
+++ b/hieradata/role/common/gerrit/server.yaml
@@ -35,3 +35,7 @@
replicateProjectDeletions: true
replicateHiddenProjects: true
# gerrit::jetty::log_host: 'logstash1002.eqiad.wmnet'
+
+# Allow use of supplemental key for scap deployment
+profile::base::ssh_server_settings:
+ ssh_authorized_keys_file: '/etc/ssh/userkeys/%u
/etc/ssh/userkeys/%u.d/cumin /etc/ssh/userkeys/%u.d/gerrit-scap'
--
To view, visit https://gerrit.wikimedia.org/r/369958
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ide6165e98189655eb54df3304452057718f36a6d
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Thcipriani <[email protected]>
Gerrit-Reviewer: Chad <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Paladox <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
