Merge pull request #382 from rubygems/remove-ssh-key

Remove ssh key secret

Author: jenshenny

Dockerfile

@@ -32,9 +32,6 @@ RUN apk --update add \
 
 COPY . /app
 
-COPY root/ root/
-RUN chmod -R 700 root/.ssh
-
 ADD https://dl.k8s.io/release/v$KUBECTL_VERSION/bin/linux/amd64/kubectl /usr/bin/kubectl
 RUN chmod +x /usr/bin/kubectl
 

config/deploy/production/schedule.yaml.erb

@@ -118,16 +118,6 @@ spec:
                     key: active_record_encryption_key_derivation_salt
             securityContext:
               privileged: false
-            volumeMounts:
-            - name: deployer-secrets
-              mountPath: /root/.ssh/id_rsa
-              subPath: ssh-key
-              readOnly: true
-          volumes:
-          - name: deployer-secrets
-            secret:
-              secretName: production
-              defaultMode: 256
 ---
 apiVersion: batch/v1
 kind: CronJob
@@ -248,13 +238,3 @@ spec:
                     key: active_record_encryption_key_derivation_salt
             securityContext:
               privileged: false
-            volumeMounts:
-            - name: deployer-secrets
-              mountPath: /root/.ssh/id_rsa
-              subPath: ssh-key
-              readOnly: true
-          volumes:
-          - name: deployer-secrets
-            secret:
-              secretName: production
-              defaultMode: 256

config/deploy/production/secrets.ejson

@@ -12,7 +12,6 @@
         "github_oauth_secret": "EJ[1:+wh4vor/bo1lnAODniywg46bsDeIgMr14/yJrpdPQz8=:+Nyk9I27fWfEvpV3ZkBR8wmFQsUBRFzr:tUQGvV5doy/SFngJxmfBZt8bXJjEH/8LkSSQ0U9eznQcwS14xa1YIp456h4CR7rQN74vKPeenyU=]",
         "github_api_token": "EJ[1:ZTIwYgS/oHltY/yux+wGJDii5t+T7Z+DxY+evoYSWHc=:1YpGr6gOi8pDswz0SBVt7BG6ey4WMTVf:y8mPc+vYmng8lAuKSU1QIYAUQAC2V1L7g2eI3tlFQxA9h+ixYwuxsyU+IRTqQqP2qjvtkl9MC0I=]",
         "redis_url": "EJ[1:ZTIwYgS/oHltY/yux+wGJDii5t+T7Z+DxY+evoYSWHc=:jJV24p7UbF3zfq9ttW4m6+WQTRtpvRKA:PDxgp5RuBiPArXIIrPOyI30XFB+PPx/wHxg+8a7ndepTlh48aCpwc6cYDpOZd4bNXxMO7AC7ULVEsuJ5qdfYZvvZz3Ivmss45g==]",
-        "ssh-key": "EJ[1:ZTIwYgS/oHltY/yux+wGJDii5t+T7Z+DxY+evoYSWHc=:x+9EP/M4PsQJCwBdLV67yHwMxQ3zk3et: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]",
         "github_app_id": "EJ[1:ZTIwYgS/oHltY/yux+wGJDii5t+T7Z+DxY+evoYSWHc=:vzykCK7zK9MgCJz6RVLBFyJJIS0B8EAN:Zy92NzFhzUEJFY1KQoopx3E0KwNc]",
         "github_installation_id": "EJ[1:ZTIwYgS/oHltY/yux+wGJDii5t+T7Z+DxY+evoYSWHc=:utFP/mTowcIdVNwKIVL/yS/S/vG3OuW7:dd5XY+fC7lQcEaOVHyBPXc0KKtU/8vI=]",
         "github_webhook_secret": "EJ[1:ZTIwYgS/oHltY/yux+wGJDii5t+T7Z+DxY+evoYSWHc=:8HHOOMLF0nOamJP627LmMtmyij0qLmCp:Svo/YWPx1aOx0NxTydmeufK//hTDo2f3hWG/kE2XrN4n3mp3BZa2uTckF0RkjofLGI1avHSc1cg=]",

config/deploy/production/sidekiq.yaml.erb

@@ -120,13 +120,3 @@ spec:
                 key: active_record_encryption_key_derivation_salt
         securityContext:
           privileged: false
-        volumeMounts:
-        - name: deployer-secrets
-          mountPath: /root/.ssh/id_rsa
-          subPath: ssh-key
-          readOnly: true
-      volumes:
-      - name: deployer-secrets
-        secret:
-          secretName: production
-          defaultMode: 256