From ad20601a9ada09f617b1eb2864efedd5aaf0817a Mon Sep 17 00:00:00 2001 From: Kaspars Skels Date: Wed, 4 Sep 2019 14:07:13 -0500 Subject: Add SSH key for Jenkins Change-Id: I11682abd440eefeada155c9ed05fc263ea2bccf3 Signed-off-by: Kaspars Skels --- .../secrets/publickey/jenkins_ssh_public_key.yaml | 11 +++++++++++ .../software/charts/ucp/divingbell/divingbell.yaml | 19 ++++++++++++++----- 2 files changed, 25 insertions(+), 5 deletions(-) create mode 100644 site/intel-pod17/secrets/publickey/jenkins_ssh_public_key.yaml (limited to 'site') diff --git a/site/intel-pod17/secrets/publickey/jenkins_ssh_public_key.yaml b/site/intel-pod17/secrets/publickey/jenkins_ssh_public_key.yaml new file mode 100644 index 0000000..fea6159 --- /dev/null +++ b/site/intel-pod17/secrets/publickey/jenkins_ssh_public_key.yaml @@ -0,0 +1,11 @@ +--- +schema: deckhand/PublicKey/v1 +metadata: + schema: metadata/Document/v1 + name: jenkins_ssh_public_key + layeringDefinition: + abstract: false + layer: site + storagePolicy: cleartext +data: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDadzshrgOmFS+8fMwHaGBclUBP65uhjHx3FDoppDvV2Itv1Y36yK2q+mrJ9+2N+UDMLr8fohZkoR1fsOLVH3RToB12hWUR6+IEA/+9QyIsyIsmcM8UVKcV4eIUX1bjKp5Nb6gAFyYDQjnq/a2Km/XsUQq6rsGSPvy7uprdNyQzocPPo29+Iu33wEfQ2eSeAxw2ODqcOjQJ1wp2O3ehy0f1k0tzR3zuvusHncTwviOMg8KhIktrln2CFiodyT4J/YtzQnPdQZ4ab28oKZPrTZpqnNSY2+MFbqgMROZ8caeKB0WshMJ9wfpkGwrZ0zMtM+JsdQX/lYhMsF6C/F7blowP jenkins@airship +... diff --git a/site/intel-pod17/software/charts/ucp/divingbell/divingbell.yaml b/site/intel-pod17/software/charts/ucp/divingbell/divingbell.yaml index 0328b37..c1259ee 100644 --- a/site/intel-pod17/software/charts/ucp/divingbell/divingbell.yaml +++ b/site/intel-pod17/software/charts/ucp/divingbell/divingbell.yaml @@ -23,36 +23,42 @@ metadata: substitutions: - dest: path: .values.conf.uamlite.users[0].user_sshkeys[0] + src: + schema: deckhand/PublicKey/v1 + name: jenkins_ssh_public_key + path: . + - dest: + path: .values.conf.uamlite.users[1].user_sshkeys[0] src: schema: deckhand/PublicKey/v1 name: grego_ssh_public_key path: . - dest: - path: .values.conf.uamlite.users[0].user_crypt_passwd + path: .values.conf.uamlite.users[1].user_crypt_passwd src: schema: deckhand/Passphrase/v1 name: grego_crypt_password path: . - dest: - path: .values.conf.uamlite.users[1].user_sshkeys[0] + path: .values.conf.uamlite.users[2].user_sshkeys[0] src: schema: deckhand/PublicKey/v1 name: kasparss_ssh_public_key path: . - dest: - path: .values.conf.uamlite.users[1].user_crypt_passwd + path: .values.conf.uamlite.users[2].user_crypt_passwd src: schema: deckhand/Passphrase/v1 name: kasparss_crypt_password path: . - dest: - path: .values.conf.uamlite.users[2].user_sshkeys[0] + path: .values.conf.uamlite.users[3].user_sshkeys[0] src: schema: deckhand/PublicKey/v1 name: jorgeas_ssh_public_key path: . - dest: - path: .values.conf.uamlite.users[3].user_sshkeys[0] + path: .values.conf.uamlite.users[4].user_sshkeys[0] src: schema: deckhand/PublicKey/v1 name: trungdt_ssh_public_key @@ -62,6 +68,9 @@ data: conf: uamlite: users: + - user_name: jenkins + user_sudo: true + user_sshkeys: [] - user_name: grego user_sudo: true user_sshkeys: [] -- cgit 1.2.3-korg