Add the admin_git jail.

This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing.
This commit is contained in:
Tom Alexander
2023-06-17 17:35:09 -04:00
parent 0f1769dd1f
commit 62ade773d8
5 changed files with 37 additions and 0 deletions

View File

@@ -0,0 +1,20 @@
os_flavor: "freebsd"
users:
talexander:
initialize: true
uid: 11235
gid: 11235
groups:
- name: wheel
authorized_keys:
- yubikey
- main_fido
- backup_fido
git:
initialize: false
shell: /usr/local/bin/git-shell
authorized_keys:
- yubikey
- main_fido
- backup_fido
sshd_enabled: true

View File

@@ -3,3 +3,4 @@ nat_dhcp ansible_connection=jail
homeserver_nat_dhcp ansible_ssh_host=nat_dhcp@172.16.16.2 ansible_connection=sshjail
mrmanager_nat_dhcp ansible_ssh_host=nat_dhcp@10.217.2.1 ansible_connection=sshjail
nat_dhcp@172.16.16.2 ansible_connection=sshjail
admin_git ansible_ssh_host=admin_git@10.217.2.1 ansible_connection=sshjail