review.opendev.org SSH key change?

[Jeremy Stanley]

On 2020-08-03 20:48:22 +0000 (+0000), Jeremy Stanley wrote:
> On 2020-08-01 14:09:53 +0000 (+0000), Jeremy Stanley wrote:
[...]
> Clark just reminded me in the #opendev IRC channel that we already
> serve separate _acme-challenge.review and _acme-challenge.review01
> CNAMEs to our acme zone, so nothing actually needs to change with
> SSL cert renewal verification. We can just replace the review CNAME
> with A/AAAA, copy the two CAA RRs from review01 to review, and
> generate the six new SSHFP RRs for the Gerrit API associated with
> the review hostname.

In fact, as a stop gap, we can omit the SSHFP records for review.o.o
initially, which will restore the prior situation for folks
connecting to the API port. I'll push that now:

    https://review.opendev.org/744557

-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: not available
URL: <http://lists.opendev.org/pipermail/service-discuss/attachments/20200803/b44b50c8/attachment.sig>