Skip to content

bootstrap-ssh/console-key

Publish a dedicated console SSH keypair so the remote SSH console can authenticate

Off by default. When true, the bootstrap-ssh task also creates a dedicated console keypair (~/.ssh/id_rsa_console on the endpoint host). The public half is added to the global access-keys-global map, so the ssh-access task installs it on every machine it provisions. The private half is stored in the global profile's console/ssh-key, which is what the remote SSH console reads.

An existing global console/ssh-key is left alone, and the endpoint's own ~/.ssh/id_rsa is never published.

Set this on the global profile or the endpoint's self machine, then run the bootstrap workflow. Machines provisioned before the change need the ssh-access task to run again to pick up the new authorized key.

Objects that Reference bootstrap-ssh/console-key

Objects used by bootstrap-ssh/console-key

Not used in current content packs