Bug 2216481 - cluster and quorum can have distinct passwords
Summary: cluster and quorum can have distinct passwords
Keywords:
Status: ON_QA
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: rhel-system-roles
Version: 9.3
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: 9.3
Assignee: Rich Megginson
QA Contact: michal novacek
Steven J. Levine
URL:
Whiteboard: role:ha_cluster
Depends On:
Blocks: 2216485
TreeView+ depends on / blocked
 
Reported: 2023-06-21 15:02 UTC by Rich Megginson
Modified: 2023-08-16 17:28 UTC (History)
7 users (show)

Fixed In Version: rhel-system-roles-1.22.0-0.16.el9
Doc Type: Enhancement
Doc Text:
Enhancement: cluster and quorum can have distinct passwords Reason: The same quorum hosts can be joined to multiple, separate clusters. Since the passwords of the "hacluster" user on these clusters might be different, it makes sense to configure them separately. Result: I separated `pcs auth` for the cluster and qdevice. I also introduced an new var `ha_cluster_hacluster_qdevice_password`, which is used for qdevice auth. If the new var is not set, qdevice auth will fall back to use `ha_cluster_hacluster_password` like rest of the cluster. This should make the change fully backwards compatible.
Clone Of:
: 2216485 (view as bug list)
Environment:
Last Closed:
Type: ---
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github linux-system-roles ha_cluster pull 134 0 None open feat: cluster and quorum can have distinct passwords 2023-06-21 15:08:16 UTC
Red Hat Issue Tracker RHELPLAN-160367 0 None None None 2023-06-21 15:04:53 UTC
Red Hat Issue Tracker RHELPLAN-160368 0 None None None 2023-06-21 15:04:57 UTC

Description Rich Megginson 2023-06-21 15:02:32 UTC
The same quorum hosts can be joined to multiple, separate clusters. Since the passwords of the 'hacluster' user on these clusters might be different, it makes sense to configure them separately.  https://github.com/linux-system-roles/ha_cluster/pull/134

Comment 12 michal novacek 2023-07-26 10:12:23 UTC
I have tested that it is possible to configure quorum device with different ha_cluster password than the cluster with rhel-system-roles-1.22.0-0.16.el9.noarch


Note You need to log in before you can comment on or make changes to this bug.