feat(users): add mwiegand-agent login for agent sessions
Every linux node gets the user with the ssh-grant agent key and passwordless sudo; the key only works while a grant is active. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
This commit is contained in:
parent
052ff72358
commit
8a70691fea
1 changed files with 7 additions and 0 deletions
|
|
@ -51,9 +51,16 @@
|
||||||
'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMVroYmswD4tLk6iH+2tvQiyaMe42yfONDsPDIdFv6I ckn',
|
'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMVroYmswD4tLk6iH+2tvQiyaMe42yfONDsPDIdFv6I ckn',
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
|
# agent sessions (ssh-grant): the key only works while a grant is active
|
||||||
|
'mwiegand-agent': {
|
||||||
|
'authorized_keys': {
|
||||||
|
'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDeU8FKtjN1+VjhxKZTzyvJ51GzPevrScXgou08hFmjb mwiegand-agent',
|
||||||
|
},
|
||||||
|
},
|
||||||
},
|
},
|
||||||
'sudoers': {
|
'sudoers': {
|
||||||
'ckn': {'ALL'},
|
'ckn': {'ALL'},
|
||||||
|
'mwiegand-agent': {'ALL'},
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue