Fuel-managed OpenStack nodes should be accessible using a non-root account only
As an OpenStack administrator using Fuel, I want to access the slave node using a non-superuser account. Many enterprise security policies prohibit the use of the root account on any node.
* Remote root SSH access to the slave nodes should be disabled (i.e. PermitRootLogin no)
* User should be able to specify the account name
Blueprint information
- Status:
- Not started
- Approver:
- None
- Priority:
- Undefined
- Drafter:
- Omar Rivera
- Direction:
- Needs approval
- Assignee:
- Dmitry Nikishov
- Definition:
- Approved
- Series goal:
- Proposed for mitaka
- Implementation:
-
Unknown
- Milestone target:
-
9.0
- Started by
- Completed by
Related branches
Related bugs
Sprints
Whiteboard
Gerrit topic: https:/
Addressed by: https:/
Run Fuel slave nodes as non-root
Addressed by: https:/
Added OS user account settings to provisioning serializers
Addressed by: https:/
Create non-root user account during image build process
Addressed by: https:/
Create additional openrc for a non-root account
Addressed by: https:/
Introduced versioned cloud_config templates
Addressed by: https:/
Added OS user account settings to openstack.yaml
Addressed by: https:/
Changed ceph manifests to work without root SSH
Addressed by: https:/
Added $root_login to osnailyfacter::ssh
Addressed by: https:/
Moved SSH credentials to config templates
Addressed by: https:/
Added separate master/slave node credentials to templates
Addressed by: https:/
Added ProvisioningSer
Addressed by: https:/
Allowed to pass SSH credentials as parameters
Addressed by: https:/
Separated Fuel and Slave nodes credentials
Addressed by: https:/
Allowed to pass SSH credentials as parameters
Gerrit topic: https:/
Addressed by: https:/
Added ssh-user parameter to dump configuration
Addressed by: https:/
Use "ssh-user" parameter from Nailgun for SSH connections
Addressed by: https:/
Use non-root account when connecting to slave nodes.
Addressed by: https:/
Added UserAccount object
Addressed by: https:/
Moved root and service user passwords to editable attributes
Addressed by: https:/
Moved root and service user passwords to editable attributes
Gerrit topic: https:/
Addressed by: https:/
Allowed to pass SSH credentials as parameters
Addressed by: https:/
Pass sudo parameter to shotgun
Work Items
Dependency tree
* Blueprints in grey have been implemented.
