Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improvement for metroae container ssh copyid #1730

Open
toweber opened this issue May 11, 2021 · 10 comments
Open

Improvement for metroae container ssh copyid #1730

toweber opened this issue May 11, 2021 · 10 comments

Comments

@toweber
Copy link
Collaborator

toweber commented May 11, 2021

Would it be possible to make this command usable without specifying a host so that the ssh key is copied to all required hosts present in the deployment files?
Right now if I want to start using the metroae container for an already existing deployment I have to run metroae container ssh copyid for all deployed components (except VSCs ofc).

@ghost
Copy link

ghost commented May 13, 2021

This is a great suggestion. I will create a JIRA ticket to track this internally. Thank you.

@ghost
Copy link

ghost commented May 13, 2021

METROAE-419 has been created.

@toweber
Copy link
Collaborator Author

toweber commented Jun 22, 2021

Thanks a lot! Will this include all Nuage components (linux based, not VSC of course) as well as target servers? Or only a subset?

@ghost
Copy link

ghost commented Jun 22, 2021

We will support Linux-based components and Linux-based target servers. We will use the credentials provided in credentials.yml or default credentials when credentials are not provided.

@toweber
Copy link
Collaborator Author

toweber commented Jun 23, 2021

Okay. I was just looking at the dev branch and could only find this role: https://github.com/nuagenetworks/nuage-metroae/blob/dev/src/roles/make-copy-sshid-automatic/tasks/main.yml
And this one only includes VSD and VSTAT so I was wondering if the other components as well as their target servers are also considered.

@ghost
Copy link

ghost commented Jun 23, 2021

@toweber you are correct. I was wrong. The implementation that we delivered to the dev branch only covers VSD and VSTAT. Your question suggests that we should add KVM-based target servers. Since we don't support upgrade of NUH and VNSUtils, it seems that there are no other VSP components to add support for. What am I missing?

@toweber
Copy link
Collaborator Author

toweber commented Jun 24, 2021

One thing that I can think of would be if MetroAE only takes care of the "deploy" but not the "predeploy". For that scenario I guess it would also be valuable / convenient to be able to copy the ssh key to NUH (or vnsutils). Currently seeing this with my customer. They have a separate team that only takes care of VM provisioning in VMWare up until IP connectivity.
What do you think?

@ghost
Copy link

ghost commented Jun 29, 2021

In v4.5 (about to be released) we have the following workflows:

  • metroae vsd copy sshid that copies '~/.ssh/id_rsa.pub' to all VSDs in the deployment. This can be helpful in the scenarios when the VM bring-up is done outside of MetroAE or we are doing an upgrade on something that existed previously.
  • metroae vstat copy sshid that does the above for the ES nodes defined in the deployment.
  • metroae container ssh copyid that copies the MetroAE container's ssh key to the specified host

from this discussion, I think additional functionality should be considered:

  • Add NUH to the list of supported nodes.
  • Add target servers to the list of supported nodes.
  • Add support for copying the container's ssh key to VSD, ES, NUH and target servers. (Not a separate workflow. Code should be smart enough to detect when the container is being used...)
  • Add a workflow for copying to all nodes in a single operation.
  • Add support for specifying the ssh key file to copy - might not be the default in the non-container case.

@toweber what do you think?

@ghost
Copy link

ghost commented Jun 29, 2021

METROAE-445 has been created to track this issue.

@toweber
Copy link
Collaborator Author

toweber commented Jun 30, 2021

That sounds great!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant