Managing Google Cloud Platform Project-Wide SSH Keys - Shopify

This post details the development of SSH-Pruner, a new application written in Go, to manage SSH keys in GCP project-wide metadata. The application iterates through projects, identifies SSH keys, and removes those without valid expiration dates. It preserves unexpired keys and distinguishes between Shopify's keys and Google's infrastructure keys. The post also discusses the challenges of previous approaches, such as deleting Google's keys and the slow operation of re-adding keys, and outlines the criteria for a successful solution: ensuring keys do not persist longer than necessary, minimal impact on developer workflows, distinguishing between Shopify and Google keys, and creating useful logging.