gstg-bastions

GSTG bastion hosts

How to start using them

SSH config is managed via glsh ssh-config (details).

Testing (for example, if you have access to deploy node), output should be like this:

$> be knife ssh 'roles:gstg-base-deploy-node' 'hostname'
deploy-01-sv-gstg.c.gitlab-staging-1.internal deploy-01-sv-gstg

Host keys

If you care about security enough to compare ssh host keys, here they are, both sha256 and md5 sums:

$> ssh-keygen -lf <(ssh-keyscan lb-bastion.gstg.gitlab.com 2>/dev/null)
256 SHA256:HAPLsO33HVEaV4LgRRD7SnhMQOwroBVOQvlaUFxzFsM lb-bastion.gstg.gitlab.com (ECDSA)
2048 SHA256:SM4BmyWO/y3MNgJVYsDcWJVBX41ouyNznv8gkUF3pI8 lb-bastion.gstg.gitlab.com (RSA)
256 SHA256:hPfler9kdTjPGX8xFtgLiEJC8iozBIZSkc3JM1WKNKc lb-bastion.gstg.gitlab.com (ED25519)

$> ssh-keygen -E md5 -lf <(ssh-keyscan lb-bastion.gstg.gitlab.com 2>/dev/null)
2048 MD5:c3:ca:b9:85:34:ec:60:2c:59:b2:d2:e4:ef:07:a5:b0 lb-bastion.gstg.gitlab.com (RSA)
256 MD5:79:6b:1e:5c:8a:4f:13:db:e0:1d:26:73:20:6f:cd:11 lb-bastion.gstg.gitlab.com (ECDSA)
256 MD5:08:bc:a7:52:60:25:bc:65:13:96:d7:44:be:11:d9:40 lb-bastion.gstg.gitlab.com (ED25519)

Links

1. Issue describing what was done in scope of the migration project to quickly set them up.
2. META issue that is a source of truth regarding middleterm/longterm setup.