Skip to content

add machine ssh key to staging mgmt#489

Open
anish-mudaraddi wants to merge 1 commit intomainfrom
add-machine-ssh-key
Open

add machine ssh key to staging mgmt#489
anish-mudaraddi wants to merge 1 commit intomainfrom
add-machine-ssh-key

Conversation

@anish-mudaraddi
Copy link
Collaborator

for easier debugging in the future

for easier debugging in future
@@ -1,5 +1,6 @@
stfc-cloud-openstack-cluster:
openstack-cluster:
machineSSHKeyName: k8s-staging
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this something we want o do if we don't encourage users to do he same? Where is the private key stored?

Copy link
Collaborator Author

@anish-mudaraddi anish-mudaraddi Feb 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

private key/passphrase is in keeper

@DavidFair - I think we should encourage users to add SSH keys as a "last resort" - especially for the kubeconfig credentials expiring issue

@DavidFair
Copy link
Collaborator

Yeah I guess unless we're actively trying to solve a problem now I'd rather not add it, then point people to either LOKI or add the key as/when we need it?

For dev I don't care if it runs with a key 24/7, but staging should be close to prod to basically pre-test something before it goes to prod. If someone can SSH in we can't reliably say prod and staging are the same from that point onwards as easily.

Also (more controversially) if something is failing then we should diagnose it in dev and either drop it from staging (it's not ready to be staged for a promotion) or accept it as a known issue to revisit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants