When a Lagoon project is created, by default an associated SSH "project key" is generated and the private key made available inside the CLI pods of the project. A service account
[email protected] is also created and given
MAINTAINER access to the project. The SSH "project key" is attached to that
The result of this is that from inside the CLI pod of any environment it is possible to SSH to any other environment within the same project. This access is used for running tasks from the command line such as synchronising databases between environments (e.g. drush
There is more information on the
MAINTAINER role available in the RBAC documentation.
It is possible to specify an SSH private key when creating a project, but this is not recommended as it has security implications.