From 9a93bc2680c9b22d3cfe3548499a3ebbc13aea08 Mon Sep 17 00:00:00 2001 From: Nicolas Ochem Date: Mon, 23 Oct 2023 14:11:10 -0700 Subject: [PATCH] authorized keys deployed in activation as well --- utils/config-generator.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/utils/config-generator.py b/utils/config-generator.py index eecaedf2b..378271b1d 100755 --- a/utils/config-generator.py +++ b/utils/config-generator.py @@ -332,6 +332,11 @@ def expose_secret_key(account_name): pod. It returns the obvious Boolean. """ if MY_POD_TYPE == "activating": + all_authorized_keys = [key for node in NODES.values() for instance in node['instances'] for key in instance['authorized_keys']] + if account_name in all_authorized_keys: + # populate all known authorized keys in the activation account. + # This avoids annoying edge cases for activating private chains, when security is not critical. + return True return NETWORK_CONFIG["activation_account_name"] == account_name if MY_POD_TYPE == "signing":