We will need access to your Rightscale instance.

This can be done by giving us guest access through the rightscale console or by providing the access Keys to the specific instance.

Those details are here:

Create a new SSH key and give them the private key, put the public key up on the instance in question.  

This script allows arbitrary public keys on instances:

#!/bin/bash -e

#

# Test for a reboot,  if this is a reboot just skip this script.

#

if test "$RS_REBOOT" = "true" ; then

  echo "Skip SSH Key install on reboot."

  logger -t RightScale "Skipping Key Install for a reboot,  use old key."

  exit 0 # Leave with a smile ...

fi

# Create the .ssh directory if it doesn't exist

[ ! -d ~root/.ssh ] && mkdir ~root/.ssh

# Copy the key from the input into the id_rsa 

echo "$PUBLIC_SSH_KEY" >> ~root/.ssh/authorized_keys

# Setup the config so we:

# 1- Accept new fingerprints automatically without asking the user (even when they have changed) 

# 2- Disable reverse name resolutions (to get rid of nasty messages of possible break ins when we use external DNS names that don't have reverse mappings)

echo "CONFIGURING: modifying ssh config file"

if [ -e ~root/.ssh/config ]; then

  [ -n "$(sed -i '/^StrictHostKeyChecking/s/yes/no/w/dev/stdout' ~root/.ssh/config)" ] && echo "StrictHostKeyChecking no" >> ~root/.ssh/config

  [ -n "$(sed -i '/^CheckHostIP/s/yes/no/w/dev/stdout' ~root/.ssh/config)" ] && echo "CheckHostIP no" >> ~root/.ssh/config

  [ -n "$(sed -i '/^PasswordAuthentication/s/yes/no/w/dev/stdout' ~root/.ssh/config)" ] && echo "PasswordAuthentication no" >> ~root/.ssh/config

else

  echo "StrictHostKeyChecking no" > ~root/.ssh/config

  echo "CheckHostIP no" >> ~root/.ssh/config

  echo "PasswordAuthentication no" >> ~root/.ssh/config

  chmod 600 ~root/.ssh/config

fi

logger -t RightScale "Installed public SSH key."

exit 0 # Leave with a smile....