modules/ssh/templates/authorized_keys.erb

   1 <%
   2   allnodeinfo = scope.lookupvar('site::allnodeinfo')
   3   roles = scope.lookupvar('site::roles')
   4 %>
   5
   6 # local admin
   7 <%= localkeys = case @fqdn
   8          when "pettersson.debian.org" then "from=\"nixon.acc.umu.se\" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwDw56/XK0/uQB+ZIOZIfZ3vpz9zLRuv6G0U4eU4VavqvaL0dXSNhGJLBDLlfpxtJYwYf/mSoK4WZasbbfHxz8jtIxK9c9aGkVA0GKT+xiHWB3J1SlwJaA7S7Ed8nNcG5PNOVd30BD5LimkS53Nz841e+MgZRuL9SfLALq7er03U= root@nixon"
   9 end
  10 localkeys
  11 %>
  12 <%=
  13   ganetikeys = []
  14   if scope.lookupvar('::cluster')
  15     scope.lookupvar('::cluster_nodes').split.sort.each do |node|
  16       if allnodeinfo.has_key?(node)
  17         ganetikeys << "# for ganeti cluster #{scope.lookupvar('::cluster').to_s}: #{allnodeinfo[node]['hostname'][0]}"
  18         allnodeinfo[node]['sshRSAHostKey'].sort.each do |key|
  19           ganetikeys << "from=\"#{allnodeinfo[node]['ipHostNumber'].join(',')}\" #{key}"
  20         end
  21       else
  22         ganetikeys << "# host #{node} not found in allnodeinfo"
  23       end
  24     end
  25   end
  26   ganetikeys.join("\n");
  27 %>
  28 #
  29 # DSA
  30 #
  31 # luca
  32 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNYrvjY/kH1TAHrnVZXnP8DcBgGXYQ/jP+oexcGmQfFvpXm8ivZRxZn1SXgu8Pld4pgUBcuSMITfA4egXU94FpbUDPXoORUC3Gp7U0Of/7ZH2OitVAbwW5g2M8pslogHxIyW0CmH8gPlBNNxY0CMSI2U1EBKUH4PeqZ6lgqLYIr/BGQeWfjnvsFHvD+KFPCOhNpLPytkP0eeibQ9on0Qwc6nsVMaW9kIMWRmkg6OlkWBnV/1IwgBPcQmL2IJ6H+zYjhEYeXlQ+w8Rw1a46lSo4Tqnj3CnSuH8TaX7EsI5qEstjb4bbcHSeErs4Nqy6IBHXkvYXuDNUr4GRdNETYf5V root@debian.org-id_rsa Luca Filipozzi
  33 # zobel
  34 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuWUv0xRqmnrYX/7b80HIAY9s80Qp4QRFH3DXEkuyDeprJC+GdJs2S/fwhWI9eZDF8NN03SLoOg9q7lXoy2Ts6tda8zfqIf/IBnvcqbsoCtbmrOTvwHj5fVFh0fw72KSc8b+Bccs+1aLXUqP2eSKXB9jpR+apUd7DQ0i6si2/fwrQvqXZ71NeRkcSXIuED9PCA2298DKob1tCAXP1XSIswxxgHdGZgVHYhNt33XSM7zksTbMjr7NBZkJOcgk3dLOVz2RSo38+Curv8nPVoD4uIsE551GXnNTPZiMosvDY3Cy3gTwBhpXFxtkRDr0jMQpYj+ahQ3F+MFJr+0S89QeHfQ== Martin Zobel-Helas - debian adm key (2010-01-04)
  35 # weasel
  36 ssh-rsa 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 Peter Palfrader - debian adm key (2008-05-11)
  37 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR9rh9AuBKt7yEAgtpvTPTl/SJWi2nAe5h5cnhTpWwPQU0VwxpJZlHWDBxldcrqUCZsycpa5e82ABLeZF9n5Sf54PbSRjCMo515/8hOkkGe6EFchI0HL+pVrSDEyVm0ymHFOj7MQn2uC3mQfOzv+v89zK1KR2355cUVjCx6JMuzwn0cQR4bTZ0YA7JSxkDuLgKooIBzck02M6yrJEEZbrk4q+qv6Enls3kwBbPY5KDVmo3apjbBlZMWd4aZtjhL0xT8VqsVhTRZrTg8DrAbW2dmE+fV7x9TeNSh30WYWzx/AdYerMtA4SrnTc2Bhntvngu98w++IILckG1zEsSP6Mr Peter Palfrader (authentication key) - A091F0BBB2A1CD5E (20140504)
  38 # jcristau
  39 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qHoJfNvqW7Ha5Tsrg6387tL3Xt4wjPhnxu082pm3bJFEkQAYVzJHtBdTWR6H2OABgPmLjC+sO5MGuXOzTNnVyL+CbhYRRSjHPHq3eaot7m4v0okIwWTcFBhb5YqRxeQHx5NK63y6yQWOYIoHH38iDBVm555RxlLGcGTGInXPoLQzpcTM0JL0aethYuNSDgmf/K6dDyEoUmzCKDgOfpOmgSWe//PiqV/ULN1/QzV3Ho/l7P5l3iYw8LBXreFuqiJjQ9YXVUL/DVMaab8yTQNnxmTTrrfzj/KSasNCzHo1FBK9n4AjGQQLs58RQuAHoBBCAhR7DfNa+zDAQBlt7c6V jcristau - authentication key 1AEFE8A5 (20151225)
  40 # aurel32
  41 ssh-rsa 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 aurel32's root key for debian.org
  42
  43 <%=
  44
  45 machine_keys = []
  46 case @fqdn
  47   when "storace.debian.org" then
  48     roles['dabackup_client'].each do |node|
  49       if allnodeinfo.has_key?(node)
  50         hostname = allnodeinfo[node]['hostname'][0]
  51
  52         machine_keys << "# #{hostname}"
  53         machine_keys << "command=\"/usr/lib/da-backup/da-backup-ssh-wrap #{hostname}\",from=\"#{allnodeinfo[node]['ipHostNumber'].join(',')}\",restrict #{allnodeinfo[node]['sshRSAHostKey'][0]}"
  54       else
  55         machine_keys << "# host #{node} not found in allnodeinfo"
  56       end
  57   end
  58 end
  59 machine_keys.join("\n")
  60 %>