Merge pull request #51348 from rmmh/coreos-no-password

Automatic merge from submit-queue Make coreos test images sshd not allow password login. This will prevent security scanners from triggering. Configuration is verbatim from: https://coreos.com/os/docs/latest/customizing-sshd.html ```release-note NONE ```

Merge pull request #51348 from rmmh/coreos-no-password
6368c1fc · Kubernetes Submit Queue · GitHub · d27da413 · a7e64aaa · 6368c1fc
Commit 6368c1fc authored Aug 26, 2017 by Kubernetes Submit Queue Committed by GitHub Aug 26, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 15 additions and 0 deletions

coreos-init.json test/e2e_node/jenkins/coreos-init.json +15 -0

No files found.
--- a/test/e2e_node/jenkins/coreos-init.json
+++ b/test/e2e_node/jenkins/coreos-init.json
@@ -24,6 +24,21 @@
        "groups": ["docker", "sudo"]
      }
    }]
+  },
+  "storage": {
+    "files": [
+      {
+        "filesystem": "root",
+        "path": "/etc/ssh/sshd_config",
+        "contents": {
+          "source": "data:,%23%20Use%20most%20defaults%20for%20sshd%20configuration.%0AUsePrivilegeSeparation%20sandbox%0ASubsystem%20sftp%20internal-sftp%0AClientAliveInterval%20180%0AUseDNS%20no%0AUsePAM%20yes%0APrintLastLog%20no%20%23%20handled%20by%20PAM%0APrintMotd%20no%20%23%20handled%20by%20PAM%0AAuthenticationMethods%20publickey",
+          "verification": {}
+        },
+        "mode": 384,
+        "user": {},
+        "group": {}
+      }
+    ]
  }
 }