An SSH private key credential (SSH Username with private key) from the global Jenkins credentials store, used to connect to Gerrit. The private key does not have to be stored on the controller's file system.
The key is read from the credentials store whenever the connection to Gerrit is started. After rotating the key in the credentials store, restart the connection (or Jenkins) so the event stream picks it up; automatic reconnects keep using the key the connection was started with.
The SSH login uses the Username configured above; the credential's user name is only used if that field is empty.