Foreman-installer ...remote-execution-script-ssh-identity-file issue

Problem:
From help in this forum I expect that running:

foreman-installer --foreman-proxy-plugin-remote-execution-script-ssh-identity-file id_ed25519_foreman_proxy

should change the value seen in:

foreman-installer --full-help

and the public key changed in:

curl https://.....:9090/ssh/pubkey

When I change:

/etc/foreman-proxy/settings.d/remote_execution_ssh.yml

and restart Foreman services the curl command does change but the setting is still not reflected in:

foreman-installer --full-help

If I run:

foreman-installer --verbose --foreman-proxy-plugin-remote-execution-script-ssh-identity-file id_ed25519_foreman_proxy

again, it’s resets the key in /etc/foreman-proxy/settings.d/remote_execution_ssh.yml to the rsa key which affects the curl command.

Expected outcome:

foreman-installer --foreman-proxy-plugin-remote-execution-script-ssh-identity-file id_ed25519_foreman_proxy

leads to:

--foreman-proxy-plugin-remote-execution-script-ssh-identity-file Provide an alternative name for the SSH keys (current: "id_ed25519_foreman_proxy")

and:

  curl https://sdv-fmandv.rcs.le.ac.uk:9090/ssh/pubkey
  ssh-ed25519 AAAAZ3NzaC1lZDI1NTE5AAAZIKlJVbGyb2DvxsBfngm1ltsuPVJjI4XKfFAZSyKNRqf1 foreman-proxy@zzzzzzzzzz

Foreman and Proxy versions:

Version 3.10.0 © 2009-2024 Paul Kelly and [Ohad Levy](mailto:ohadlevy@gmail.com)

Foreman and Proxy plugin versions:

  • ansible-collection-theforeman-foreman-4.0.0-2.el9.noarch
  • candlepin-4.3.12-1.el9.noarch
  • candlepin-selinux-4.3.12-1.el9.noarch
  • foreman-3.10.0-1.el9.noarch
  • foreman-cli-3.10.0-1.el9.noarch
  • foreman-console-3.10.0-1.el9.noarch
  • foreman-dynflow-sidekiq-3.10.0-1.el9.noarch
  • foreman-installer-3.10.0-1.el9.noarch
  • foreman-installer-katello-3.10.0-1.el9.noarch
  • foreman-postgresql-3.10.0-1.el9.noarch
  • foreman-proxy-3.10.0-1.el9.noarch
  • foreman-redis-3.10.0-1.el9.noarch
  • foreman-release-3.10.0-1.el9.noarch
  • foreman-selinux-3.10.0-1.el9.noarch
  • foreman-service-3.10.0-1.el9.noarch
  • katello-4.12.0-1.el9.noarch
  • katello-certs-tools-2.9.0-2.el9.noarch
  • katello-client-bootstrap-1.7.9-2.el9.noarch
  • katello-common-4.12.0-1.el9.noarch
  • katello-repos-4.12.0-1.el9.noarch
  • katello-selinux-5.0.2-1.el9.noarch
  • python3.11-pulp-ansible-0.20.2-3.el9.noarch
  • python3.11-pulp-certguard-1.7.1-2.el9.noarch
  • python3.11-pulp-cli-0.21.2-5.el9.noarch
  • python3.11-pulp-container-2.16.4-1.el9.noarch
  • python3.11-pulp-deb-3.0.1-1.el9.noarch
  • python3.11-pulp-file-1.15.1-2.el9.noarch
  • python3.11-pulp-glue-0.21.2-3.el9.noarch
  • python3.11-pulp-python-3.10.0-3.el9.noarch
  • python3.11-pulp-rpm-3.23.3-1.el9.noarch
  • python3.11-pulpcore-3.39.11-1.el9.noarch
  • rubygem-foreman-tasks-9.1.1-1.fm3_11.el9.noarch
  • rubygem-foreman_ansible-14.0.0-1.fm3_11.el9.noarch
  • rubygem-foreman_maintain-1.5.1-1.el9.noarch
  • rubygem-foreman_remote_execution-13.0.0-1.fm3_11.el9.noarch
  • rubygem-hammer_cli-3.10.0-1.el9.noarch
  • rubygem-hammer_cli_foreman-3.10.0-1.el9.noarch
  • rubygem-hammer_cli_foreman_ansible-0.6.0-1.el9.noarch
  • rubygem-hammer_cli_foreman_ansible-doc-0.6.0-1.el9.noarch
  • rubygem-hammer_cli_foreman_remote_execution-0.3.0-1.el9.noarch
  • rubygem-hammer_cli_foreman_tasks-0.0.20-1.el9.noarch
  • rubygem-hammer_cli_katello-1.12.0-0.1.pre.master.el9.noarch
  • rubygem-katello-4.12.0-1.el9.noarch
  • rubygem-pulp_ansible_client-0.20.3-1.el9.noarch
  • rubygem-pulp_certguard_client-1.6.5-1.el9.noarch
  • rubygem-pulp_container_client-2.16.4-1.el9.noarch
  • rubygem-pulp_deb_client-3.0.1-1.el9.noarch
  • rubygem-pulp_file_client-1.15.1-1.el9.noarch
  • rubygem-pulp_ostree_client-2.1.3-1.el9.noarch
  • rubygem-pulp_python_client-3.10.0-1.el9.noarch
  • rubygem-pulp_rpm_client-3.23.2-1.el9.noarch
  • rubygem-pulpcore_client-3.39.9-1.el9.noarch
  • rubygem-smart_proxy_pulp-3.3.0-1.el9.noarch

Distribution and version:

Rocky Linux 9.3 (Blue Onyx)

Other relevant data:

Verbose katello.log:

http://sprunge.us/eVHr7f