Support non-root SSH deployents via ansible become

Registered by Derek Ditch

User Story: As a deployer of Kolla, I want to be able to SSH to remote systems as a non-root user to run prechecks, deployment, and post-deployment actions via sudo access so that sudo actions are properly logged about who performed what actions.

Rationale: In many enterprise environments, users are not allowed to SSH as root, and this is generally a poor practice anyhow (which is why there is an explicit means to shut it off in OpenSSHd). The primary motivation in many environments is that users should not login as a super user, thereby leaving no audit trail.

Implementation: I've deployed Kolla using ansible-playbook directly and simply passed the --become flag. This can also be managed via the inventory file vars for each host, but AFAIK you can't force ansible to prompt for a sudo password this way. I don't like hard-coding them into my inventory file, and for complex passwords this is problematic anyway.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Undefined
Drafter:
Derek Ditch
Direction:
Approved
Assignee:
None
Definition:
Obsolete
Series goal:
None
Implementation:
Not started
Milestone target:
None
Completed by
Mark Goddard

Related branches

Sprints

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.