SSH Key Credentials

Store or generate SSH keys in Ankra for server access on provisioned self-managed clusters.

SSH key credentials store public keys that are deployed to servers during cluster provisioning. You can either provide your own public key or let Ankra generate a keypair for you. They’re required for self-managed clusters on providers such as Hetzner, OVH, DigitalOcean, UpCloud, Scaleway (closed beta), AWS EC2, Ankra Cloud (closed beta), Proxmox, and Morpheus.

Creating an SSH Key Credential

1. Choose an approach

   • Bring your own key: provide an existing SSH public key
   • Generate a keypair: Ankra generates a new Ed25519 keypair and returns the private key for you to save
2. Add to Ankra (UI)

   Go to Credentials → Add → SSH Key, enter a name, and either paste your public key or choose Generate.

3. Or via CLI

   An SSH key credential belongs to the whole organisation, so one credential can be attached to clusters on any provider.

   # Provide your own public key
   ankra credentials ssh-key create --name my-key --public-key-file ~/.ssh/id_ed25519.pub
   
   # Or let Ankra generate a keypair; the private key is written to the file you name
   ankra credentials ssh-key create --name my-key --generate --private-key-file ./my-key.pem
   

   The provider-named routes, such as ankra credentials hetzner ssh-key create --name my-key --generate, create the same organisation-wide credential and still work.

When generating a keypair, the private key is only returned once. Save it immediately to a secure location.

Listing SSH Key Credentials

CLI

ankra credentials ssh-key list