Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-26 Thread Jiří Stránský
(Removing [Heat] from the subject.) So here are the steps i think are necessary to get the PKI setup done and safely passed through Jenkins. If anyone thinks something is redundant or missing, please shout: 1. Patch to os-cloud-config: * Generation of keys and certs for cases user doesn't

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-16 Thread Clint Byrum
Excerpts from Adam Young's message of 2014-03-12 06:19:47 -0700: > On 03/11/2014 01:20 PM, Clint Byrum wrote: > > Excerpts from Adam Young's message of 2014-03-11 07:50:58 -0700: > >> On 03/11/2014 05:25 AM, Dmitry Mescheryakov wrote: > >>> For what it's worth in Sahara (former Savanna) we inject t

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-12 Thread Jiří Stránský
On 11.3.2014 15:50, Adam Young wrote: On 03/11/2014 05:25 AM, Dmitry Mescheryakov wrote: For what it's worth in Sahara (former Savanna) we inject the second key by userdata. I.e. we add echo "${public_key}" >> ${user_home}/.ssh/authorized_keys to the other stuff we do in userdata. Dmitry 2014

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-12 Thread Adam Young
On 03/11/2014 01:20 PM, Clint Byrum wrote: Excerpts from Adam Young's message of 2014-03-11 07:50:58 -0700: On 03/11/2014 05:25 AM, Dmitry Mescheryakov wrote: For what it's worth in Sahara (former Savanna) we inject the second key by userdata. I.e. we add echo "${public_key}" >> ${user_home}/.s

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-11 Thread Clint Byrum
Excerpts from Jiří Stránský's message of 2014-03-10 06:10:46 -0700: > On 7.3.2014 14:50, Imre Farkas wrote: > > On 03/07/2014 10:30 AM, Jiří Stránský wrote: > >> Hi, > >> > >> there's one step in cloud initialization that is performed over SSH -- > >> calling "keystone-manage pki_setup". Here's the

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-11 Thread Clint Byrum
Excerpts from Adam Young's message of 2014-03-11 07:50:58 -0700: > On 03/11/2014 05:25 AM, Dmitry Mescheryakov wrote: > > For what it's worth in Sahara (former Savanna) we inject the second > > key by userdata. I.e. we add > > echo "${public_key}" >> ${user_home}/.ssh/authorized_keys > > > > to the

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-11 Thread Adam Young
On 03/11/2014 05:25 AM, Dmitry Mescheryakov wrote: For what it's worth in Sahara (former Savanna) we inject the second key by userdata. I.e. we add echo "${public_key}" >> ${user_home}/.ssh/authorized_keys to the other stuff we do in userdata. Dmitry 2014-03-10 17:10 GMT+04:00 Jiří Stránský :

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-11 Thread Dmitry Mescheryakov
For what it's worth in Sahara (former Savanna) we inject the second key by userdata. I.e. we add echo "${public_key}" >> ${user_home}/.ssh/authorized_keys to the other stuff we do in userdata. Dmitry 2014-03-10 17:10 GMT+04:00 Jiří Stránský : > On 7.3.2014 14:50, Imre Farkas wrote: >> >> On 03/0

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-10 Thread James Slagle
On Mon, Mar 10, 2014 at 6:10 AM, Jiří Stránský wrote: > On 7.3.2014 14:50, Imre Farkas wrote: >> >> On 03/07/2014 10:30 AM, Jiří Stránský wrote: >>> >>> Hi, >>> >>> there's one step in cloud initialization that is performed over SSH -- >>> calling "keystone-manage pki_setup". Here's the relevant c

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-10 Thread Jiří Stránský
On 7.3.2014 14:50, Imre Farkas wrote: On 03/07/2014 10:30 AM, Jiří Stránský wrote: Hi, there's one step in cloud initialization that is performed over SSH -- calling "keystone-manage pki_setup". Here's the relevant code in keystone-init [1], here's a review for moving the functionality to os-cl

Re: [openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-07 Thread Imre Farkas
On 03/07/2014 10:30 AM, Jiří Stránský wrote: Hi, there's one step in cloud initialization that is performed over SSH -- calling "keystone-manage pki_setup". Here's the relevant code in keystone-init [1], here's a review for moving the functionality to os-cloud-config [2]. The consequence of thi

[openstack-dev] [TripleO] os-cloud-config ssh access to cloud

2014-03-07 Thread Jiří Stránský
Hi, there's one step in cloud initialization that is performed over SSH -- calling "keystone-manage pki_setup". Here's the relevant code in keystone-init [1], here's a review for moving the functionality to os-cloud-config [2]. The consequence of this is that Tuskar will need passwordless ss