Private key usage for ssh-cmd plugin

[noxPHX]

Hello!

How can I use a private key defined in an Application or a Project within a job for the plugin-ssh-cmd step?

Let's say I have defined an "app-ssh" key and/or a "proj-ssh-prjpl" key, what is the syntax to use it for the ssh-cmd plugin?
I understand reading the documentation that keys can be used as variables (https://ovh.github.io/cds/docs/concepts/variables/) like {{.cds.app.app-ssh}} but the plugin keeps returning PLUGIN%!(EXTRA string=Error parsing private key : %s, *errors.errorString=ssh: no key found) for whatever I try.

The only way I found to use a private key is to generate it manually (eg using openssl) and to paste it directly as a string in a "classic" variable but I am bothered by a plain private key showing.

Thanks
Nox

[yesnault]

Hi @noxPHX,

We recommend to install the key with worker key install command https://ovh.github.io/cds/docs/components/worker/key/install/ and the run ssh command in a step script too.
This will allow you to interact with ansible and other useful tools with a ssh connection.

The plugin plugin-ssh-cmd-cmd takes the content of the private key in argument. It's probably something that we don't want to recommend now as we can't use ssh key from app or project with it.

worker key install is the best way to use the keys on the projects/apps.

[noxPHX]

Hello @yesnault,

Thank you for your detailed answer!
I was able to get rid of plugin-ssh-cmd and use the worker key install command in a step to run ssh commands later.

Regards,
Nox