Uploaded image for project: 'OpenShift Windows Containers'
  1. OpenShift Windows Containers
  2. WINC-707

Find alternate way and replace "openshift-dev.pem" SSH key from wmco CI/CD and other places

    XMLWordPrintable

Details

    • Story
    • Resolution: Unresolved
    • Major
    • None
    • None
    • None
    • 5
    • False
    • False

    Description

      Description

       openshift-dev.pem private SSH key from the openshift/shared-secrets repository is going to be removed this week, and references to it in our internal documentation will also be removed.  As winc team use this key to share access to build and test instances, we need to develop a new process to do so. A promising option is BitWarden, which allows one to share keys and other sensitive artifacts securely between teammates.

      If CI processes inject the openshift-dev.pem private key or a matching public key into our build instances, we need to follow the OpenShift CI documentation for adding secrets to replace it.

      Engineering Details

      The hack/e2e script can generate a key to be used when creating Windows nodes.
       

      Acceptance Criteria

      • CI/CD pipeline should work without any regression.
      • Should be able to create clusters in AWS/AZURE/vSphere/GCP/Nutanix with new solution. 
      • Openshift-dev.pub public key is removed from vSphere golden images and updated with the new key.

      Attachments

        Activity

          People

            Unassigned Unassigned
            rteague@redhat.com Russell Teague
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated: