should be unique /var/lib/juju/system-identity on each API server

Bug #1317917 reported by Vladislav Klyachin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
juju-core
Won't Fix
Low
Unassigned

Bug Description

This bug is related to https://bugs.launchpad.net/juju-core/+bug/1310255
The above bug was fixed with system-identity copying from master server during 'juju ensure-availability' execution.

For security reason, we may want to have each API server have their own system identity.

jam: The issue is that if we are going to give each one a unique identity (which I think is better, fwiw, but I'm not sure if it breaks some assumptions). So having unique identities is more of a "it would be nice if they did" rather than "they must".

summary: - should be different /var/lib/juju/system-identity files in HA
+ should be unique /var/lib/juju/system-identity on each API server
Revision history for this message
John A Meinel (jameinel) wrote :

This might be Medium=>High if we want to address this as part of the HA work.

tags: added: authorized-keys ha tech-debt
Changed in juju-core:
importance: Undecided → Low
status: New → Triaged
tags: added: authorised-keys
removed: authorized-keys
Changed in juju-core:
status: Triaged → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Related blueprints

Remote bug watches

Bug watches keep track of this bug in other bug trackers.