Hadoop cluster security: user keys

[Sergey Lukjanov]

Savanna should provide an ability to specify user key (name of the key registered in OpenStack) that will be automatically provisioned to the vm (using cloud-init) and than user can access vm using this key.

[Nirmal Ranganathan (rnirmal)]

This is good, but involves the user having to interact with the nova as well. Would be nice if another component provides these services.

[Sergey Lukjanov (slukjanov)]

Savanna is targeted to use OpenStack components and it's right way to use keypairs stored in nova.

In Horizon UI we'll design it like instance creation (keypairs dropdown and inlined "create keypair" button).
In Savanna API you need take auth token from Keystone, flavors and image ids from Glance, so it's not a problem to take keypair from Nova.

[Matthew Farrellee (mattf)]

Good idea.

Related - Savanna could crib its own keypair (install user's plus savanna's) to eliminate the need for a root password

[Sergey Lukjanov (slukjanov)]

Here is the separated issue for savanna's keypair - https://bugs.launchpad.net/savanna/+bug/1179821

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/31490
Committed: http://github.com/stackforge/savanna/commit/01c3e9943a2de691455783f6af663216fb6915f9
Submitter: Jenkins
Branch: master

commit 01c3e9943a2de691455783f6af663216fb6915f9
Author: Alexander Kuznetsov <email address hidden>
Date: Mon Jun 3 16:26:52 2013 +0400

    Cluster security and node placement control

    Adding user key to the cluster

    Each cluster will have a it own private key for passwordless login

    It is possible to schedule a data nodes on diffirent hosts

    implements: blueprint node-placement-control and blueprint cluster-security

    fixed: bug #1179815 and bug #1179821

    Change-Id: I27183b9fcf1652b8f65a7018fe9cb880d5bed3b3