Hi @KartikMistry re: the question how to get the key to us: you can make a new file in your home dir on the deployment server, deploy1002, chmod 400 it, paste the key and let us know the file name. We'll take ti from there.

In T299023#7620868, @Dzahn wrote:

Hi @KartikMistry re: the question how to get the key to us: you can make a new file in your home dir on the deployment server, deploy1002, chmod 400 it, paste the key and let us know the file name. We'll take ti from there.

In the past, we used to send GPG encrypted file to the deployer of the key (Eg: https://phabricator.wikimedia.org/T284887#7154410). Is that OK? Let me know your GPG Public key on any keyserver and I should do that by email or on the location you mentioned. That's more secure than putting it as plain text, IMO.

Of course using GPG is fine as well. I just did not suggest it because usually people consider it cumbersome and once we add the credentials in the private repo they will be unencrypted again, though on other hosts. Additionally it meant the ticket could still be resolved by anyone as I am not on clinic duty and keyservers often caused as trouble. We kind of stopped using them and upload keys into our own repo now.

here you go though:

https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xb049b180212e42a7afb4d43337e9b5c6f5f6a067

https://keyserver.ubuntu.com/pks/lookup?search=dzahn%40wikimedia.org&fingerprint=on&op=index

In T299023#7623070, @Dzahn wrote:

Of course using GPG is fine as well. I just did not suggest it because usually people consider it cumbersome and once we add the credentials in the private repo they will be unencrypted again, though on other hosts. Additionally it meant the ticket could still be resolved by anyone as I am not on clinic duty and keyservers often caused as trouble. We kind of stopped using them and upload keys into our own repo now.

here you go though:

https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xb049b180212e42a7afb4d43337e9b5c6f5f6a067

https://keyserver.ubuntu.com/pks/lookup?search=dzahn%40wikimedia.org&fingerprint=on&op=index

Got it. Let's follow the GPG signed method this time being. Keys are available at: deploy1002:/home/kartik/keys - it has two files, key and secret - both need to deploy as we did in T284887.

@KartikMistry Ok, I found the files, could decrypt them and added them to the private repo.

they are available as Flores:key and Flores:secret under the same hierarchy that "Elia" is under.

mt:
  Flores:
    key:
    secret: