Bug 2000527
| Summary: | [RFE] [RHOSP 16.1] Provide the ability to set basic_options via puppet hieradata in the puppet class tripleo::profile::base::sshd on the undercloud node | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Punit Kundal <pkundal> |
| Component: | puppet-tripleo | Assignee: | OSP Team <rhos-maint> |
| Status: | NEW --- | QA Contact: | David Rosenfeld <drosenfe> |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | 16.1 (Train) | CC: | dhill, jjoyce, jschluet, slinaber, tvignaud |
| Target Milestone: | --- | Keywords: | FutureFeature |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | Bug | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Description of problem: We can customize sshd_config on the undercloud node by setting hieradata for class tripleo::profile::base::sshd there is a parameter in the puppet code /usr/share/openstack-puppet/modules/tripleo/manifests/profile/base/sshd.pp this parameter is basic_options: +++ 83 $basic_options = { 84 'HostKey' => [ 85 '/etc/ssh/ssh_host_rsa_key', 86 '/etc/ssh/ssh_host_ecdsa_key', 87 '/etc/ssh/ssh_host_ed25519_key', 88 ] 89 } 90 +++ this only sets the HostKey in sshd_config on the undercloud node; however if the customer wants to disallow rsa_key for ssh; then the only option is to directly modify the puppet code and remove this line we should be able to set this parameter as well with the tripleo sshd puppet class like the other parameters for the overcloud nodes this is not an issue; it's only for the undercloud node Version-Release number of selected component (if applicable): puppet-tripleo-11.5.0-1.20210406223722.f716ef5.el8ost.noarch How reproducible: Always Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: