Skip to content

Comments

This to remove the existing keys if it is not present in the keys#69

Open
karthikcmc wants to merge 1 commit intosingleplatform-eng:masterfrom
karthikcmc:master
Open

This to remove the existing keys if it is not present in the keys#69
karthikcmc wants to merge 1 commit intosingleplatform-eng:masterfrom
karthikcmc:master

Conversation

@karthikcmc
Copy link

In the authorized_keys module used in this role is updated with exclusive attribute . It would be addressing the issue raised in the Removing ssh keys #56.

…le . It would be addressing the issue raised in the Removing ssh keys singleplatform-eng#56
@FrankGiesecke
Copy link

@davidpanofsky Please, can you review and merge this?

@davidpanofsky
Copy link
Member

I can see the value of this change, but think it might be better to make this behavior something one can opt in/out of. Concerned that with this change, manually added entries would be cleaned up which could be confusing.

Also, note that I'm no longer actively a member of the team which owns this repo. I'll reach out to see if I can get someone to take it on for a faster response in the future.

@ytorunoSP ytorunoSP self-assigned this Feb 16, 2023
@FrankGiesecke
Copy link

How is this going on?
Many of use use this role to manage users and their ssh keys for access.
So ist is necessary to trust the list of keys configured for this role.

The current behavior keeps every key which was added. So if someone adds an unknown key, a very bad backdoor gets opened!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants