At my company all employees are given a private key, which get's renewed each year, that they should use to connect to VMs. The SA here have a puppet script which will look up my public key and save it into ~/.ssh/authorized_keys file on any VM so I can connect to it.
The problem is that they are overwriting the authorized_keys file. That means any other keys I add to the file are also overwritten. This frustrates me since I like to be able to connect from box A to box B, mostly so I can SCP, and I don't want to put my personal private key on box A since it's a box multuple users have sudo permissions on. I'd usually create a new ssh key per box and add that boxes public key to the other boxes authorized_users, but this keeps being erased by puppet.
Is there any means I can keep additional authorized keys from being overwritten without changing the puppet scripts themselves, which I don't maintain?
Failing that is there an easy way that the puppet scripts could be modified to not overwrite my additions, but still allow them to update my public key, that I could suggest to the SA's?
The VM's are centos machines.