hadoop element manually creates credentials

[Robert Collins]

I note that the hadoop diskimage-builder element manually creates a user, sets a password and so on.. the password and ssh key should be passed in - e.g. via nova metadata or heat stack parameters. That way a single image is usable in different environments without security ramifications.

[Alexander Ignatov (aignatov)]

Agree with Robert.
Savanna 0.2 will set password and ssh keys for hadoop user via nova during the cluster creation stage.
This in the our development plan and already partially implemeted for root user.

[Sergey Lukjanov (slukjanov)]

Sorry, this issue isn't completed yet…

Already done:

* login-password configuration moved to the separated element - https://github.com/stackforge/savanna-extra/commit/8c74913e91cf0e0df36cbbc0c7c6ee35818a2fce, Robert, thank you!

TODO items:

* remove all ssh configuration tweaks;
* remove ssh keypair generation for all users (depends on implementation of https://blueprints.launchpad.net/savanna/+spec/avoid-keypair-in-dib-scripts)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/35118

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/35118
Committed: http://github.com/stackforge/savanna/commit/07153cc6b3e1e7916def3dab3e190a02374dd7de
Submitter: Jenkins
Branch: master

commit 07153cc6b3e1e7916def3dab3e190a02374dd7de
Author: Ruslan Kamaldinov <email address hidden>
Date: Mon Jul 1 15:09:41 2013 +0400

    Private key for user hadoop in vanilla plugin.

    Write cluster-wide private key and authorized_keys for user hadoop in
    the Vanilla plugin.
    This is the same key we use in
    instances.py#_generate_user_data_script().

    There's going to be corresponding fix in savanna dib elements.

    Partially fixes: bug #1188442
    Implements: blueprint avoid-keypair-in-dib-scripts

    Change-Id: I81b98053d4176d7f87bf9ed1b7e64eea6994562d