Unclear instructions in Readme for openchami.env

[sujit-jadhav]

Following node is given in the https://github.com/OpenCHAMI/tutorial-2025/blob/main/Phase%202/Readme.md

Note
This feature requires that impersonation is enabled with cloud-init. Check and make sure that the IMPERSONATION environment variable is set in /etc/openchami/configs/openchami.env.
We should see the SSH key we created in the config:

#cloud-config
merge_how:
- name: list
  settings: [append]
- name: dict
  settings: [no_replace, recurse_list]
users:
  - name: root
    ssh_authorized_keys: ['<SSH_KEY>']

It is not clear if I need to confirm SSH key in the /etc/openchami/configs/openchami.env or I need to add the above entries in the /etc/openchami/configs/openchami.env

Please clarify.

This is how my /etc/openchami/configs/openchami.env contents look:

[root@demo nodes]# cat /etc/openchami/configs/openchami.env
# Environemnt Variables
SYSTEM_NAME=demo
SYSTEM_DOMAIN=openchami.cluster

# Environemnt Variables
URLS_SELF_ISSUER=https://demo.openchami.cluster/
URLS_SELF_PUBLIC=https://demo.openchami.cluster/
URLS_LOGIN=https://demo.openchami.cluster/login
URLS_CONSENT=https://demo.openchami.cluster/consent
URLS_LOGOUT=https://demo.openchami.cluster/logout

# Environemnt Variables
POSTGRES_USER=ochami

# Environemnt Variables
BSS_USESQL=true
BSS_INSECURE=true
BSS_DEBUG=true
BSS_DBHOST=postgres
BSS_DBPORT=5432
BSS_DBNAME=bssdb
BSS_DBUSER=bss-user
BSS_JWKS_URL=http://opaal:3333/keys
BSS_OAUTH2_ADMIN_BASE_URL=http://opaal:3333
BSS_OAUTH2_PUBLIC_BASE_URL=http://opaal:3333
BSS_IPXE_SERVER=demo.openchami.cluster
BSS_CHAIN_PROTO=https

# Environemnt Variables
SMD_DBHOST=postgres
SMD_DBPORT=5432
SMD_DBNAME=hmsds
SMD_DBUSER=smd-user
SMD_DBOPTS=sslmode=disable
SMD_JWKS_URL=http://opaal:3333/keys

# Environemnt Variables
STEPPATH=/home/step
DOCKER_STEPCA_INIT_NAME=OpenCHAMI
DOCKER_STEPCA_INIT_DNS_NAMES=step-ca,step-ca.openchami.cluster
DOCKER_STEPCA_INIT_ACME=true
DOCKER_STEPCA_INIT_PASSWORD="supersecretpassword"
DOCKER_STEPCA_INIT_PROVISIONER_NAME="Admin"
DOCKER_STEPCA_INIT_PROVISIONER_PASSWORD="provisionerpassword"

# Environemnt Variables
OPAAL_URL=http://opaal:3333
HSM_URL=http://smd:27779
ANSIBLE_HOST_KEY_CHECKING=False

# Environemnt Variables for cloud-init
LISTEN=:27777
SMD_URL=http://smd:27779
OPAAL_URL=http://opaal:3333
JWKS_URL=http://opaal:3333/keys
IMPERSONATION=true
[root@demo nodes]#