dynamic-platforms: "\
    linux/amd64,\
    linux/arm64,\
    linux-c2xlarge/amd64,\
    linux-c2xlarge/arm64,\
    linux-c4xlarge/amd64,\
    linux-c4xlarge/arm64,\
    linux-c6gd2xlarge/arm64,\
    linux-c8xlarge/amd64,\
    linux-c8xlarge/arm64,\
    linux-cxlarge/amd64,\
    linux-cxlarge/arm64,\
    linux-g4xlarge/amd64,\
    linux-g64xlarge/amd64,\
    linux-m2xlarge/amd64,\
    linux-m2xlarge/arm64,\
    linux-m4xlarge/amd64,\
    linux-m4xlarge/arm64,\
    linux-m8xlarge/amd64,\
    linux-m8xlarge/arm64,\
    linux-mlarge/amd64,\
    linux-mlarge/arm64,\
    linux-mxlarge/amd64,\
    linux-mxlarge/arm64,\
    linux-root/amd64,\
    linux-root/arm64,\
    macos-mac2metal/arm64\
  "
....
  dynamic.macos-mac2metal-arm64.type: "aws"
  dynamic.macos-mac2metal-arm64.region: "us-east-1"
  dynamic.macos-mac2metal-arm64.ami: "ami-000ce2c23b96216d3"
  dynamic.macos-mac2metal-arm64.instance-type: "mac2.metal"
  dynamic.macos-mac2metal-arm64.instance-tag: "stage-arm64-mac2metal"
  dynamic.macos-mac2metal-arm64.key-name: "konflux-stage-int-mab01"
  dynamic.macos-mac2metal-arm64.aws-secret: "aws-account"
  dynamic.macos-mac2metal-arm64.ssh-secret: "aws-ssh-key"
  dynamic.macos-mac2metal-arm64.security-group-id: "sg-0482e8ccae008b240"
  dynamic.macos-mac2metal-arm64.max-instances: "5"
  dynamic.macos-mac2metal-arm64.subnet-id: "subnet-07597d1edafa2b9d3"
  dynamic.macos-mac2metal-arm64.disk: "100"
  dynamic.macos-mac2metal-arm64.allocation-timeout: "1200"
  dynamic.macos-mac2metal-arm64.tenancy: "host"
  dynamic.macos-mac2metal-arm64.host-resource-group-arn: "arn:aws:resource-groups:us-east-1:654654171619:group/MacOS-Servers"
  dynamic.macos-mac2metal-arm64.license-configuration-arn: "arn:aws:license-manager:us-east-1:654654171619:license-configuration:lic-fecd71a2010a12080e452eb28065f489"
  dynamic.macos-mac2metal-arm64.user-data: |
    #!/bin/bash
    set -eu
    set -x
    
    user="konflux-builder"
    
    # Check if user already exists
    if ! id "$user" &>/dev/null; then
        # Generate random password
        random_password=$(openssl rand -base64 32)
    
        # Create user
        sudo sysadminctl -addUser "$user" -fullName "Konflux Builder" -password "$random_password" -home /Users/$user
    
        # Clear password from variable
        unset random_password
    else
        echo "User $user already exists, skipping user creation"
    fi
    
    # Create home directory if it doesn't exist
    sudo mkdir -p /Users/$user
    
    # Create SSH directory
    sudo mkdir -p /Users/$user/.ssh
    
    # Remove existing SSH keys if they exist
    sudo rm -f /Users/$user/.ssh/id_rsa /Users/$user/.ssh/id_rsa.pub
    
    # Generate new SSH keys
    sudo ssh-keygen -t rsa -b 4096 -f /Users/$user/.ssh/id_rsa -N "" -C ""
    
    # Set proper permissions on .ssh directory
    sudo chmod 700 /Users/$user/.ssh
    
    # Create/overwrite authorized_keys
    sudo chmod 600 /Users/$user/.ssh/authorized_keys 2>/dev/null || true
    sudo cat /Users/$user/.ssh/id_rsa.pub | sudo tee /Users/$user/.ssh/authorized_keys > /dev/null
    
    # Set ownership of entire home directory to ensure user has full control
    sudo chown -R $user:staff /Users/$user
    
    # Copy private key to ec2-user's directory
    sudo cp /Users/$user/.ssh/id_rsa /Users/ec2-user/$user
    
    # Set ownership of the copied private key to ec2-user
    sudo chown ec2-user:staff /Users/ec2-user/$user
    sudo chmod 600 /Users/ec2-user/$user
    
    --//--