Give the management backup runner SSH access to its source hosts #72

Merged
scruffydude merged 1 commit from fix/management-backup-source-ssh into main 2026-10-13 21:46:13 -04:00
Collaborator

Summary

The code-server cutover (#71) moved the code-server backup source to optibcc. broadcaster had no optibcc alias in its hand-applied ~/.ssh/config and its key was not authorized on optibcc, so backup-management-plane (set -euo pipefail, code-server is the first source) failed and would skip cloudcli/broadcaster too on the next Sunday run.

  • authorize broadcaster runner key on every remote management_backup.sources[].host (skips localhost / self)
  • manage a # ANSIBLE MANAGED management_backup sources SSH alias block using inventory ansible_host

Validation

  • syntax-check passes
  • --check --diff: adds key on optibcc only (deskpi already has it), adds optibcc+deskpi alias block, 0 failures

🤖 Generated with Claude Code

## Summary The code-server cutover (#71) moved the `code-server` backup source to optibcc. broadcaster had no `optibcc` alias in its hand-applied `~/.ssh/config` and its key was not authorized on optibcc, so `backup-management-plane` (set -euo pipefail, code-server is the first source) failed and would skip cloudcli/broadcaster too on the next Sunday run. - authorize broadcaster runner key on every remote `management_backup.sources[].host` (skips localhost / self) - manage a `# ANSIBLE MANAGED management_backup sources` SSH alias block using inventory `ansible_host` ## Validation - syntax-check passes - `--check --diff`: adds key on optibcc only (deskpi already has it), adds optibcc+deskpi alias block, 0 failures 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Give the management backup runner SSH access to its source hosts
All checks were successful
CI Pipeline / Validate Ansible Syntax (pull_request) Successful in 1m37s
CI Pipeline / Test Ansible Playbooks (Syntax Only) (pull_request) Successful in 52s
CI Pipeline / Python Tests (pull_request) Successful in 24s
CI Pipeline / Validate Ansible Syntax (push) Successful in 1m25s
CI Pipeline / Test Ansible Playbooks (Syntax Only) (push) Successful in 43s
CI Pipeline / Python Tests (push) Successful in 24s
d71acd80d3
The code-server cutover moved a backup source to optibcc, which broadcaster
could not reach: its ~/.ssh/config had no optibcc alias and its key was not
authorized there, so the whole set -e backup run would abort. Authorize the
runner key on every remote source host and manage an SSH alias block for
them, so moving a source no longer depends on hand-applied SSH config.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
scruffydude deleted branch fix/management-backup-source-ssh 2026-10-13 21:46:14 -04:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
scruffydude/homelab!72
No description provided.