store ssh auth key snippets for buildd wb and upload access, but do not collect just yet
authorPeter Palfrader <peter@palfrader.org>
Sat, 7 Sep 2019 22:39:59 +0000 (00:39 +0200)
committerPeter Palfrader <peter@palfrader.org>
Sat, 7 Sep 2019 22:39:59 +0000 (00:39 +0200)
modules/buildd/manifests/ssh.pp

index e4c0852..55173e3 100644 (file)
@@ -1,4 +1,18 @@
 # SSH configuration
 class buildd::ssh {
   ssh::keygen {'buildd': }
+
+  ssh::authorized_key_add { 'buildd::buildd_master':
+    target_user => 'wb-buildd',
+    command     => "/srv/wanna-build/bin/wanna-build --ssh-wrapper ${::hostname}",
+    key         => $facts['buildd_key'],
+    collect_tag => 'buildd_master',
+  }
+
+  ssh::authorized_key_add { 'buildd::buildd_upload':
+    target_user => 'buildd-uploader',
+    command     => "/home/buildd-uploader/rsync-ssh-wrap ${::hostname}",
+    key         => $facts['buildd_key'],
+    collect_tag => 'buildd_upload',
+  }
 }