Access to the machine console with an existing private key also works without a valid token

[y16144]

/usr/bin/ssh -i privatekey f08150815-4911-4242-4911-3cecef6d5ebc@api.fits.cloud -p 5222 -o StrictHostKeyChecking=No

Connecting to console of "f08150815-4911-4242-4911-3cecef6d5ebc" ... Exit with ~. [SOL Session operational. Use ~? for help]

[majst01]

Gardener rotates ssh-keypairs since https://github.com/gardener/gardener/pull/4224, i really would prefer this. Available since g/g 1.28

[Gerrit91]

Idea during planning:

• Create temporary SSH key per console session, store it in the machine entity
• metal-console then checks presented public key with the stored private key
• Removes the stored private key immediately after the session was established

[majst01]

SSH Key rotation is now in place, could we close this issue now ?

[Gerrit91]

Please re-open if this is not solved yet.