openstack/tripleo-heat-templates
Code Issues Proposed changes

Merge "Use StrictHostKeyChecking=no in enable-ssh-admin.sh"

Browse Source
This commit is contained in:
Zuul 2017-12-14 22:04:32 +00:00 committed by Gerrit Code Review
commit ce4ac4d2c4
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
deployed-server/scripts/enable-ssh-admin.sh
View File

@ -57,7 +57,7 @@ for HOST in $OVERCLOUD_HOSTS; do
echo "Inserting TripleO short term key for $HOST" echo "Inserting TripleO short term key for $HOST"
# prepending an extra newline so that if authorized_keys didn't # prepending an extra newline so that if authorized_keys didn't
# end with a newline previously, we don't end up garbling it up # end with a newline previously, we don't end up garbling it up
ssh -i "$OVERCLOUD_SSH_KEY" -l "$OVERCLOUD_SSH_USER" "$HOST" "echo -e '\n$SHORT_TERM_KEY_PUBLIC_CONTENT' >> \$HOME/.ssh/authorized_keys" ssh -o StrictHostKeyChecking=no -i "$OVERCLOUD_SSH_KEY" -l "$OVERCLOUD_SSH_USER" "$HOST" "echo -e '\n$SHORT_TERM_KEY_PUBLIC_CONTENT' >> \$HOME/.ssh/authorized_keys"
done done
echo "Starting ssh admin enablement workflow" echo "Starting ssh admin enablement workflow"

7
releasenotes/notes/use-strict-host-key-checking-no-766c6d9814243de3.yaml Normal file
View File

@ -0,0 +1,7 @@
---
fixes:
- Use StrictHostKeyChecking=no to inject the temporary ssh key in
enable-ssh-admin.sh. The user provides the list of hosts for ssh, so we can
safely assume that they intend to ssh to those hosts. Also, for the ovb
case the hosts will have new host ssh keys which have not yet been
accepted.