Mistral

[Security] SSH actions pass private keys via network

Bug #1507600 reported by Nikolay Makhotkin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mistral
Fix Released
Critical
Nikolay Makhotkin
Mistral 2.0.0 "2.0.0"

Bug Description

SSH actions now pass private keys over the network.

There is a suggestion to search keys at executor node by its name.

Keys should be in <user-home>/.ssh/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to mistral (master)

Fix proposed to branch: master
Review: https://review.openstack.org/236992

Changed in mistral:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to mistral (master)

Reviewed: https://review.openstack.org/236992
Committed: https://git.openstack.org/cgit/openstack/mistral/commit/?id=56f2d5f4b5603f457e6b4eb5b0a699471b658f9c
Submitter: Jenkins
Branch: master

commit 56f2d5f4b5603f457e6b4eb5b0a699471b658f9c
Author: Nikolay Mahotkin <email address hidden>
Date: Mon Oct 19 16:58:16 2015 +0300

    Fixing SSH actions to use names of private keys

     * SSH action uses private key names instead of
       private keys themself. All private keys now
       should be in <user-home>/.ssh/, e.g. searching
       of key 'my_key.pem' will be at <user-home>/.ssh/my_key.pem
     * Fixed functional tests
     * Remove sudo while running tests

    Closes-Bug: #1507600

    Depends-On: Idc4340cda80d02f4ee88c91600b72d0f914c4084

    Change-Id: I503d78ff541183ce850476229842fa6f20061a00

Changed in mistral:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to mistral (stable/liberty)

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/249591

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to mistral (stable/liberty)

Reviewed: https://review.openstack.org/249591
Committed: https://git.openstack.org/cgit/openstack/mistral/commit/?id=9581f2e33a7985f653a76c44b65635b75af8fc97
Submitter: Jenkins
Branch: stable/liberty

commit 9581f2e33a7985f653a76c44b65635b75af8fc97
Author: Nikolay Mahotkin <email address hidden>
Date: Mon Oct 19 16:58:16 2015 +0300

    Fixing SSH actions to use names of private keys

     * SSH action uses private key names instead of
       private keys themself. All private keys now
       should be in <user-home>/.ssh/, e.g. searching
       of key 'my_key.pem' will be at <user-home>/.ssh/my_key.pem
     * Fixed functional tests
     * Remove sudo while running tests

    Closes-Bug: #1507600

    Change-Id: I503d78ff541183ce850476229842fa6f20061a00
    (cherry picked from commit 56f2d5f4b5603f457e6b4eb5b0a699471b658f9c)

tags: added: in-stable-liberty
Revision history for this message
Thierry Carrez (ttx) wrote : Fix included in openstack/mistral 2.0.0.0b1

This issue was fixed in the openstack/mistral 2.0.0.0b1 development milestone.

Changed in mistral:
status: Fix Committed → Fix Released
Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/mistral 1.0.1

This issue was fixed in the openstack/mistral 1.0.1 release.

Renat Akhmerov (rakhmerov)
Changed in mistral:
milestone: mitaka-1 → 2.0.0
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

This issue was fixed in the openstack/mistral 1.0.1 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.