Bug 1043088 - gear authorized_keys may have command="/usr/bin/trap-user
Summary: gear authorized_keys may have command="/usr/bin/trap-user
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Online
Classification: Red Hat
Component: Containers
Version: 2.x
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Jhon Honce
QA Contact: libra bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-13 22:36 UTC by Jhon Honce
Modified: 2015-05-14 23:33 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-12-16 19:05:19 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Jhon Honce 2013-12-13 22:36:40 UTC
Description of problem:
The incorrect command is blocking people from logging into the gear.

Version-Release number of selected component (if applicable):


How reproducible:
30k gears in production

Steps to Reproduce:
1. (initial cause unknown)
2. create application
3. modify authorized_keys to use /usr/bin/trap-user

Actual results:
authorized_keys may have command="/usr/bin/trap-user

Expected results:
authorized_keys should have command="/usr/bin/oo-trap-user

Additional info:
2.0.37 upgrades will be enhanced to resolve this issue

Comment 1 Jhon Honce 2013-12-13 23:30:50 UTC
Fixed in https://github.com/openshift/li/pull/2236

Comment 2 Jhon Honce 2013-12-16 19:05:19 UTC
Went to production with 2.0.37.2

Comment 3 Meng Bo 2013-12-17 05:44:52 UTC
Checked on latest devenv with the upgrade extension from stage branch.

After modified the gear authorized_keys to "trap-user", it will be repaired after upgrade.

Comment 4 Meng Bo 2013-12-18 03:19:50 UTC
Checked again on devenv-stage_619, after upgrade, the .ssh/authorized_keys file can be repaired for both scale and non-scale apps.


Note You need to log in before you can comment on or make changes to this bug.