Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Each "Project" needs to have it's own ssh private key

#3

Each project needs to have it's own private key to override the global framework properties ssh private key.

Reported by Deleted User · September 24th, 2010 @ 02:51 PM

State: new
Milestone: Rundeck 1.2
Assigned to: nobody

Activity

  1. Deleted User
    Deleted User
    • Tag set to customer request

    September 24th, 2010 @ 03:12 PM

  2. Deleted User
    Deleted User
    • Milestone set to Rundeck 1.0
    • Milestone order changed from 2 to 0

    September 27th, 2010 @ 12:37 PM

  3. Deleted User
    Deleted User
    • State changed from new to open

    September 27th, 2010 @ 12:39 PM

  4. Deleted User
    Deleted User
    • State changed from open to new

    September 27th, 2010 @ 12:40 PM

  5. Alex-SF
    Alex-SF
    • Milestone changed from Rundeck 1.0 to Rundeck 1.1
    • Milestone order changed from 1 to 0

    November 2nd, 2010 @ 03:25 PM

  6. Alex-SF
    Alex-SF
    • Milestone changed from Rundeck 1.1 to Rundeck 1.2
    • Milestone order changed from 5 to 0

    January 6th, 2011 @ 10:13 AM

  7. Craig Dunn
    Craig Dunn

    I agree having a global ssh private key is restrictive, particularly for something I'm working on right now. Is project based overrides the right place to do it though? A project might include nodes that require different keys. Would it be better to have the key and use this override set on in the resource parameters for the node? We already have the "username" attribute, so it would make sense to have key info here.

    January 10th, 2011 @ 01:12 AM

  8. Deleted User
    Deleted User

    That might be the easiest to extend in the short term.

    Sent from my iPhone

    On Jan 10, 2011, at 1:12 AM, "Lighthouse" <no-reply@lighthouseapp.com>
    wrote:

    January 10th, 2011 @ 08:16 AM

  9. Alex-SF
    Alex-SF
    • Milestone cleared.
    • Milestone order changed from 7 to 0

    February 16th, 2011 @ 08:10 AM

  10. Alex-SF
    Alex-SF
    • Tag changed from customer request to customer request, ssh

    A solution might be possible using 1.3 and your own SSH plugin. This plugin can be defaulted to use a project-specific key.

    July 9th, 2011 @ 02:03 PM

  11. Greg Schueler
    Greg Schueler
    • Tag cleared.

    currently the ssh plugin still uses only the framework level property for the keypath, but it would be easy to update it to look for project level key, and/or node-level attribute for the key.

    I recommend we do this for 1.3 as it's a common request. either this issue or a new issue

    July 11th, 2011 @ 09:39 AM

  12. Alex-SF
    Alex-SF

    Keep it in this issue

    July 11th, 2011 @ 09:46 AM

  13. Greg Schueler
    Greg Schueler
    • Milestone set to Rundeck 1.3
    • Tag set to enhancement, ssh
    • Assigned user set to Greg Schueler
    • Milestone order changed from 37 to 0

    July 11th, 2011 @ 09:58 AM

  14. Greg Schueler
    Greg Schueler
    • Tag changed from enhancement, ssh to customer request, enhancement, ssh

    I propose that the ssh keyfile is then identified in this way by the builtin ssh and scp plugin:

    1. look for node attribute "ssh-keypath", if it is present use the file located at that path.
    2. look for project property "default.ssh.keypath", use it if present
    3. look for framework property "default.ssh.keypath", use it if present
    4. look for original framework property "framework.ssh.keypath"

    July 11th, 2011 @ 12:14 PM

  15. Alex-SF
    Alex-SF

    using the prefix "default" does not match up w/ existing property and config file naming convention.
    Perhaps then:

    • project.ssh.keypath (project.properties)
    • framework.ssh.keypath (framework.properties)
    • node.ssh.keypath (resource model data for a node)

    July 12th, 2011 @ 10:35 AM

  16. Greg Schueler
    Greg Schueler

    "node.ssh.keypath" won't work for xml..

    also, it seems reduendant to prefix it with "framework" in the framework
    properties file, and "project" in the project properties file.

    what about just "ssh.keypath" for the properties files?

    July 12th, 2011 @ 10:44 AM

  17. Alex-SF
    Alex-SF

    framework prefix may seem redundant but dropping it will create an inconsistency (which we often have too much of).

    To keep the property naming somewhat closer would probably should change it to "ssh-keypath" across the board.
    framework.ssh-keypath, project.ssh-keypath, and ssh-keypath for a node

    July 12th, 2011 @ 10:52 AM

  18. Greg Schueler
    Greg Schueler

    the purpose of naming the properties the same thing was that it is easier to just consider the scope, and you could cut and paste from one to the other in order to promote or demote the scope of the setting.

    if we'd rather just maintain the consistency for naming then i suppose the redundancy is at least consistent

    July 12th, 2011 @ 10:52 AM

  19. Greg Schueler
    Greg Schueler

    ok that's fine...how about

    1. node attribute "ssh-keypath"
    2. project property "project.ssh-keypath"
    3. framework prop "framework.ssh-keypath"
    4. (compatibility) framework prop "framework.ssh.keypath"

    July 12th, 2011 @ 10:54 AM

  20. Alex-SF
  21. Deleted User
  22. Greg Schueler
    Greg Schueler

    the only problem is now we break consistency with framework properties "framework.ssh.timeout" and "framework.ssh.user"

    July 12th, 2011 @ 11:26 AM

  23. Deleted User
  24. Deleted User
  25. Alex-SF
    Alex-SF
    • State changed from needs_verification to resolved

    verified!

    July 14th, 2011 @ 12:52 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.