Dustin C. Hatch
859deb0664
Now that we have an internal SSH certificate authority, instead of explicitly listing all M×N keys for each user and client machine, we can list only the CA certificate in the SSH authorized keys file for the *core* user. This will allow any user who presents a valid, signed SSH certificate for the *core* principal to log in.
8 lines
268 B
YAML
8 lines
268 B
YAML
variant: fcos
|
|
version: 1.4.0
|
|
passwd:
|
|
users:
|
|
- name: core
|
|
ssh_authorized_keys:
|
|
- cert-authority ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBImIoTTmhynCVy/vJ/Q2bWydzqVsvwhGvDgBbklw0eDt8UEbbP9HHPhxiMDtiAhbvRTg5BhYVAlR1MgdooT5dwQ=
|