As part of T256005, I need a new ssh key pair to be generated and stored in Puppet. It will be loaded in keyholder on the deployment server and let scap reach the target machines.
The generated files should be saved as:
modules/secret/secrets/keyholder/deploy_ci_docroot modules/secret/secrets/keyholder/deploy_ci_docroot.pub
For reference, the related puppet code to add scap is https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/607056/
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • hashar | T149924 Clear /srv/.git on contint1001; move integration.wikimedia.org docroot to new location | |||
| Resolved | • hashar | T256005 Move integration/docroot.git deployment to scap | |||
| Resolved | ema | T256138 Create ssh keypair for integration/docroot deployment with scap |
Key generated and added to the private puppet repo under modules/secret/secrets/keyholder.
@ema please sync with me, I am guessing we could regenerate the key with a better identifier, if that is the issue. Other keys use the path /etc/keyholder.d/apache2modsec and that way it is easier to identify armed keys by keyholder. I will also try to document better the issues I encountered when deploying a new repo.