Clear Packer authorized key after build (#82)

Signed-off-by: peterdeme <[email protected]>
spacelift-io · Feb 11, 2025 · d460f58 · d460f58
1 parent 5d590c7
commit d460f58
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 12 deletions.
diff --git a/aws.pkr.hcl b/aws.pkr.hcl
@@ -118,10 +118,11 @@ It contains all the neccessary tools to run Spacelift workers.
 More information: https://docs.spacelift.io.
 EOT
 
-  shared_credentials_file = var.shared_credentials_file
-  encrypt_boot            = var.encrypt_boot
-  instance_type           = var.instance_type
-  ssh_username            = "ec2-user"
+  shared_credentials_file   = var.shared_credentials_file
+  encrypt_boot              = var.encrypt_boot
+  instance_type             = var.instance_type
+  ssh_username              = "ec2-user"
+  ssh_clear_authorized_keys = true
 
   vpc_id = var.vpc_id
   region = var.region

diff --git a/azure.pkr.hcl b/azure.pkr.hcl
@@ -131,6 +131,8 @@ source "azure-arm" "spacelift" {
 
   vm_size  = var.vm_size
 
+  ssh_clear_authorized_keys = true
+
   azure_tags = merge(var.additional_tags, {
     Name                 = "Spacelift Worker Image"
     SourceImagePublisher = var.source_image_publisher

diff --git a/gcp.pkr.hcl b/gcp.pkr.hcl
@@ -63,14 +63,15 @@ variable "zone" {
 }
 
 source "googlecompute" "spacelift" {
-  project_id          = var.project_id
-  source_image_family = var.source_image_family
-  source_image        = var.source_image
-  ssh_username        = "spacelift"
-  zone                = var.zone
-  disk_size           = 50
-  machine_type        = var.machine_type
-  account_file        = var.account_file
+  project_id                = var.project_id
+  source_image_family       = var.source_image_family
+  source_image              = var.source_image
+  ssh_username              = "spacelift"
+  ssh_clear_authorized_keys = true
+  zone                      = var.zone
+  disk_size                 = 50
+  machine_type              = var.machine_type
+  account_file              = var.account_file
 
   image_name              = "${var.image_base_name}-${var.image_storage_location}-${var.suffix}"
   image_family            = var.image_family