@dcaro was just granted global root as a member of the ops group via T267040, and then this cross-validate script ran this evening and caught this duplicate key issue.

@dcaro: Please update this task via comment with your new, dedicated to WMF production only, ssh public key. If you do this before the end of day Friday (2020-11-06), assign this back to me. If you update after that date, you need to assign to whoever is listed on: https://wikitech.wikimedia.org/wiki/SRE_Clinic_Duty#Schedule

Change 639410 had a related patch set uploaded (by RobH; owner: RobH):
[operations/puppet@production] revoke dcaro prod ssh key

https://gerrit.wikimedia.org/r/639410

Change 639410 merged by RobH:
[operations/puppet@production] revoke dcaro prod ssh key

https://gerrit.wikimedia.org/r/639410

In T267292#6605218, @dcaro wrote:

Here is a new one:

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID46/gY7mfN96ylAdQb6ZBfrq9L3QwemMtN5ZjrJgEmK dcaro@magnum

Would it be possible to know where/when did I use it? (I'd like to avoid using it the wrong way again)

There's two different keys: This one will be added to the all servers in production (anything ending in .wmnet or .wikimedia.org), the other key is the one you add in your Preferences at wikitech.wikimedia.org under "OpenStack -> Public SSH keys:". As long as those are distinct keys, everything is fine.

In case you're using Debian, Ubuntu or some other kind of deb-based distro you can also install https://wikitech.wikimedia.org/wiki/Wmf-sre-laptop, which should help at lot in getting your setup sorted out.

Change 639532 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] admin: update dcaro ssh key

https://gerrit.wikimedia.org/r/639532

Change 639532 merged by Jbond:
[operations/puppet@production] admin: update dcaro ssh key

https://gerrit.wikimedia.org/r/639532