Skip to content
This repository has been archived by the owner on Jun 29, 2022. It is now read-only.

packet: disable syncing allowed SSH keys on nodes #471

Merged
merged 2 commits into from
May 29, 2020

Commits on May 29, 2020

  1. packet: disable syncing allowed SSH keys on nodes

    This commit disables syncing authorized SSH keys for core user on nodes
    from Packet's user's keys and project's keys, so only keys which are
    specified in the Lokomotive configuration are actually authorized, as
    having more keys allowed than specified in the configuration might be a
    potential security threat.
    
    Closes #465
    
    Signed-off-by: Mateusz Gozdek <mateusz@kinvolk.io>
    invidian committed May 29, 2020
    Configuration menu
    Copy the full SHA
    a80198e View commit details
    Browse the repository at this point in the history
  2. test/system: initial commit

    This commit adds e2e test, to verify, that there is no extra SSH keys
    added to the Kubernetes nodes, other than one specified in the SSH_KEY
    environment variable, which is used by the CI for provisioning the
    clusters.
    
    Ideally, the test should pull the keys directly from the cluster
    configuration, however this is currently not trivial to implement.
    
    Refs #465
    
    Signed-off-by: Mateusz Gozdek <mateusz@kinvolk.io>
    invidian committed May 29, 2020
    Configuration menu
    Copy the full SHA
    72079dd View commit details
    Browse the repository at this point in the history