Blocking project wide ssh keys while creating machine class (#506)

* hardcoded blocking project wide ssh keys while creating machine class * updating machine class in worker tests
gardener · Oct 17, 2022 · debd61e · debd61e
1 parent 3db08ee
commit debd61e
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 2 deletions.
diff --git a/charts/internal/machineclass/values.yaml b/charts/internal/machineclass/values.yaml
@@ -28,6 +28,9 @@ machineClasses:
 #   count: 1
   labels:
     name: mcm
+  metadata:
+    - key: "block-project-ssh-keys"
+      value: "TRUE"
   machineType: n1-standard-4
   nodeTemplate:
     capacity:

diff --git a/pkg/controller/worker/machines.go b/pkg/controller/worker/machines.go
@@ -179,7 +179,14 @@ func (w *workerDelegate) generateMachineConfig(_ context.Context) error {
 				"description":        fmt.Sprintf("Machine of Shoot %s created by machine-controller-manager.", w.worker.Name),
 				"disks":              disks,
 				"labels":             gceInstanceLabels,
-				"machineType":        pool.MachineType,
+				// TODO: make this configurable for the user
+				"metadata": []map[string]string{
+					{
+						"key":   "block-project-ssh-keys",
+						"value": "TRUE",
+					},
+				},
+				"machineType": pool.MachineType,
 				"networkInterfaces": []map[string]interface{}{
 					{
 						"subnetwork":        nodesSubnet.Name,

diff --git a/pkg/controller/worker/machines_test.go b/pkg/controller/worker/machines_test.go
@@ -422,7 +422,13 @@ var _ = Describe("Machines", func() {
 								},
 							},
 						},
-						"labels":      gceInstanceLabels,
+						"labels": gceInstanceLabels,
+						"metadata": []map[string]string{
+							{
+								"key":   "block-project-ssh-keys",
+								"value": "TRUE",
+							},
+						},
 						"machineType": machineType,
 						"networkInterfaces": []map[string]interface{}{
 							{