rundeck/rundeck — pull request #1029 by mathpl (2014-11-20 23:19:16+00:00)
Title: ssh-agent forwarding limited to job execution

This will start /usr/bin/ssh-agent on job execution (if enabled), inject the private key the job would normally use in the agent, make the agent available on the newly created jsch connection and enable agent forwarding on the connection. Once the job is done the ssh-agent is killed. Optionally ssh-agent can be started with "-t " which will guarantee the private key will be flushed at that time if by some chance it's not killed.

Obviously with this enabled you cannot rely on Rundeck to limit what hosts are accessible to your users, proper key management is required on all hosts.

New variables are:
### framework.properties:
```
framework.local.ssh-agent=
framework.local.ttl-ssh-agent=
```

### project.properties:
```
project.local.ssh-agent=
project.local.ttl-ssh-agent=
```

### Node properties:
```
localSSHAgent=
localTtlSSHAgent=
```