Issue

• We would like set custom identity key pair in the cluster-init operation.
• We would like change the identity key pair in all worker controllers.

Environment

• CloudBees Jenkins Enterprise - AWS/OpenStack

Resolution

Custom identity key pair in the cluster-init operation

If you do not set the option ssh_identity the key pair will be generated by CJE and stored in the .dna folder. So if you want to use a custom identity key pair you have to set the property ssh_identity in your cluster-init.config file.

[tiger]
...
ssh_identity = FULL_PATH_TO_IDENTITY_FILE
...

Change the identity key pair in all worker controllers

The public key in .dna/servers/keypairs/default.pub is injected on the host at spin-up time, this will be the ~/.ssh/authorized_keys file on every host.