nova should use built in authorized_keys and key_gen modules

Bug #1477512 reported by Andy McCrae
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack-Ansible
Fix Released
Low
Andy McCrae
Kilo
Fix Released
Low
Andy McCrae
Trunk
Fix Released
Low
Andy McCrae

Bug Description

To standardize out, nova should use the authorized_keys built in ansible module as well as the generate_ssh_keys flag for user creation. (This change was made to fix intermittent repo server issues, but should be applied to nova and keystone also).

Tags: in-kilo
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to os-ansible-deployment (master)

Fix proposed to branch: master
Review: https://review.openstack.org/205008

Changed in openstack-ansible:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Fix proposed to branch: master
Review: https://review.openstack.org/205056

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to os-ansible-deployment (master)

Reviewed: https://review.openstack.org/205056
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=6b8e334248dc43b20de2fcdbc3adf6d48c961820
Submitter: Jenkins
Branch: master

commit 6b8e334248dc43b20de2fcdbc3adf6d48c961820
Author: Andy McCrae <email address hidden>
Date: Thu Jul 23 14:15:40 2015 +0100

    Adjust SSH key creation method for Keystone

    This patch ensures that the authorized_keys ansible module, as well as
    the built in "generate_ssh_keys" flag for user creation, so that we can
    avoid using shell out commands.

    Additionally, this moves the key synchronisation to use ansible
    variables instead of the memcache server.

    Change-Id: I0072b8d0977ab9aea10dd95080756f6864612013
    Closes-Bug: #1477512

Changed in openstack-ansible:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Reviewed: https://review.openstack.org/205008
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=1a47a5b74f032b484b4e1823a726283914770f2f
Submitter: Jenkins
Branch: master

commit 1a47a5b74f032b484b4e1823a726283914770f2f
Author: Andy McCrae <email address hidden>
Date: Thu Jul 23 12:06:50 2015 +0100

    Adjust SSH key creation method for Nova compute

    This patch ensures that the authorized_keys ansible module, as well as
    the built in "generate_ssh_keys" flag for user creation, so that we can
    avoid using shell out commands.

    Additionally, this moves the key synchronisation to use ansible
    variables instead of the memcache server.

    Change-Id: Icd97ebd44f6065fc60fdce1b61e9dc2daa45faa0
    Closes-Bug: #1477512

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to os-ansible-deployment (kilo)

Fix proposed to branch: kilo
Review: https://review.openstack.org/205143

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Fix proposed to branch: kilo
Review: https://review.openstack.org/205144

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to os-ansible-deployment (kilo)

Reviewed: https://review.openstack.org/205143
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=7e26bc5b53253e613a56d25ffc239f9096550566
Submitter: Jenkins
Branch: kilo

commit 7e26bc5b53253e613a56d25ffc239f9096550566
Author: Andy McCrae <email address hidden>
Date: Thu Jul 23 12:06:50 2015 +0100

    Adjust SSH key creation method for Nova compute

    This patch ensures that the authorized_keys ansible module, as well as
    the built in "generate_ssh_keys" flag for user creation, so that we can
    avoid using shell out commands.

    Additionally, this moves the key synchronisation to use ansible
    variables instead of the memcache server.

    Change-Id: Icd97ebd44f6065fc60fdce1b61e9dc2daa45faa0
    Closes-Bug: #1477512
    (cherry picked from commit 1a47a5b74f032b484b4e1823a726283914770f2f)

tags: added: in-kilo
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Reviewed: https://review.openstack.org/205144
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=cf391672711991a22da7b85b50c8ec60efc831db
Submitter: Jenkins
Branch: kilo

commit cf391672711991a22da7b85b50c8ec60efc831db
Author: Andy McCrae <email address hidden>
Date: Thu Jul 23 14:15:40 2015 +0100

    Adjust SSH key creation method for Keystone

    This patch ensures that the authorized_keys ansible module, as well as
    the built in "generate_ssh_keys" flag for user creation, so that we can
    avoid using shell out commands.

    Additionally, this moves the key synchronisation to use ansible
    variables instead of the memcache server.

    Change-Id: I0072b8d0977ab9aea10dd95080756f6864612013
    Closes-Bug: #1477512
    (cherry picked from commit 6b8e334248dc43b20de2fcdbc3adf6d48c961820)

Revision history for this message
Davanum Srinivas (DIMS) (dims-v) wrote : Fix included in openstack/openstack-ansible 11.2.11

This issue was fixed in the openstack/openstack-ansible 11.2.11 release.

Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/openstack-ansible 11.2.12

This issue was fixed in the openstack/openstack-ansible 11.2.12 release.

Revision history for this message
Davanum Srinivas (DIMS) (dims-v) wrote : Fix included in openstack/openstack-ansible 11.2.14

This issue was fixed in the openstack/openstack-ansible 11.2.14 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.