Skip to content

Conversation

bghal
Copy link
Contributor

@bghal bghal commented Aug 15, 2025

roachprod uses this list to look for a public SSH key under $HOME/.ssh.
1Password handily manages single-purpose SSH keys. This change makes
keys exported from there discoverable.

Epic: none

Release note: None

@bghal bghal requested a review from a team as a code owner August 15, 2025 15:49
@bghal bghal requested review from herkolategan and golgeek and removed request for a team August 15, 2025 15:49
@cockroach-teamcity
Copy link
Member

This change is Reviewable

roachprod uses this list to look for a public SSH key under $HOME/.ssh.
1Password handily manages single-purpose SSH keys. This change makes
keys exported from there discoverable.

Epic: none

Release note: None
@bghal bghal force-pushed the roachprod-discover-keys branch from 4804b13 to ebadf9a Compare August 15, 2025 15:50
Copy link
Contributor

@golgeek golgeek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR, this is much appreciated!

That being said, I'm not sure I understand how this works with 1password and its ssh-agent.

I might have missed something on 1password's side, but it looks like when you generate an SSH key, it stays in 1password and is supposed to be managed by the agent (so offered as its 1password name during the SSH roundtrip) and it's not dumped into the user's .ssh folder unless exported (and not really managed by 1password anymore).

On the other hand, from what I can gather from the roachprod code, this DefayltPubKeyNames list requires a file in $HOME/.ssh/$KEYNAME.pub to exist for the key to be provided as an identity_file to the SSH command generated by roachprod.

Could you provide a bit more context?


// Cockroach additions
"google_compute_engine",
"Roachprod",
Copy link
Collaborator

@herkolategan herkolategan Aug 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have more or less the same question as @golgeek, but in addition want to know why both an uppercase and lowercase version of "(R|r)oachprod"?

@bghal
Copy link
Contributor Author

bghal commented Aug 19, 2025

Yeah realized roachprod isn't really doing anything with the keys; really just needed to touch the identity and public key files.

@bghal bghal closed this Aug 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants