updated publisher_ssh_keys to use sunet::ssh_keys

eupub-test-1.komreg.net/overlay/etc/hiera/data/local.yaml

@@ -1,2 +1,10 @@
-publisher_ssh_key: AAAAC3NzaC1lZDI1NTE5AAAAIBCp8IWCkQ9apLGj/cNmNFtJX68+k2CC36WOldwtJLZH
+publisher_ssh_keys_db:
-publisher_ssh_key_type: ssh-ed25519
+   'publisher':
+      key  : 'AAAAC3NzaC1lZDI1NTE5AAAAIBCp8IWCkQ9apLGj/cNmNFtJX68+k2CC36WOldwtJLZH'
+      type : 'ssh-ed25519'
+      name : 'publisher'
+      options : 'command="/usr/bin/rrsync /var/www/html",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding'
+
+publisher_ssh_keys_mapping:
+  'root':
+    - 'publisher'

eupub-test-2.komreg.net/overlay/etc/hiera/data/local.yaml

@@ -1,2 +1,11 @@
-publisher_ssh_key: AAAAC3NzaC1lZDI1NTE5AAAAIBCp8IWCkQ9apLGj/cNmNFtJX68+k2CC36WOldwtJLZH
+publisher_ssh_keys_db:
-publisher_ssh_key_type: ssh-ed25519
+   'publisher':
+      key  : 'AAAAC3NzaC1lZDI1NTE5AAAAIBCp8IWCkQ9apLGj/cNmNFtJX68+k2CC36WOldwtJLZH'
+      type : 'ssh-ed25519'
+      name : 'publisher'
+      options : 'command="/usr/bin/rrsync /var/www/html",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding'
+
+publisher_ssh_keys_mapping:
+  'root':
+    - 'publisher'
+

global/overlay/etc/puppet/manifests/cosmos-site.pp

@@ -242,10 +242,9 @@ class md_publisher(Array $allow_clients=['any'], $keyname=undef, String $dir="/v
    # this allows fileage check to work wo sudo
    file { '/var/www': ensure => directory, mode => '0755' } ->
    file { '/var/www/html': ensure => directory, mode => '0755', owner => 'www-data', group =>'www-data' } ->
-   sunet::rrsync {$dir:
+   sunet::ssh_keys { 'publisher-keys':
-      ro                => false,
+     config => safe_hiera('publisher_ssh_keys_mapping', {}),
-      ssh_key           => safe_hiera('publisher_ssh_key'),
+     key_database_name => 'publisher_ssh_keys_db'
-      ssh_key_type      => safe_hiera('publisher_ssh_key_type')
    } ->
    package {['lighttpd','attr']: ensure => latest } ->
    exec {'enable-ssl':

p2.qa.komreg.net/overlay/etc/hiera/data/local.yaml

@@ -1,3 +1,12 @@
 ---
-publisher_ssh_key: AAAAC3NzaC1lZDI1NTE5AAAAIJrzCjtN8nf5+MhNgAR61vAd6/6dSvfBDCm5oaGeXIXH
+publisher_ssh_keys_db:
-publisher_ssh_key_type: ssh-ed25519
+   'publisher':
+      key  : 'AAAAC3NzaC1lZDI1NTE5AAAAIJrzCjtN8nf5+MhNgAR61vAd6/6dSvfBDCm5oaGeXIXH'
+      type : 'ssh-ed25519'
+      name : 'publisher'
+      options : 'command="/usr/bin/rrsync /var/www/html",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding'
+
+publisher_ssh_keys_mapping:
+  'root':
+    - 'publisher'
+