Re:How to properly manage SSH keys for server access
by ThePhysicist on Saturday September 26, 2020 @05:52PM
(#24602463)
We also manage our whole infrastructure automatically via Ansible, but if there's a problem that goes beyond an error in the deployed code it's still necessary to access a machine via SSH in order to debug it. Logs are arguably something that can be easily centralized as most application support logging via syslog and there are a lot of great tools available for it like greylog.
[ Parent
| on HN ]
Re:How to properly manage SSH keys for server access
by gabereiser on Saturday September 26, 2020 @05:57PM
(#24602491)
Sure, having a privileged key you use with ansible to actually do the thing... but we’re talking about giving the shop access to the box. Not your team of highly trained infrastructure engineers (or bob, who has all his playbooks on a thumb drive for his office). If ansible and non-cloud is your deal, an ssh key (or two: deployments) is fine. I’m just against giving others access to things they could break or worse, leave the door open...