Bug 2216485 - cluster and quorum can have distinct passwords
Summary: cluster and quorum can have distinct passwords
Keywords:
Status: VERIFIED
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: rhel-system-roles
Version: 8.9
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Rich Megginson
QA Contact: michal novacek
Steven J. Levine
URL:
Whiteboard: role:ha_cluster
Depends On: 2216481
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-06-21 15:11 UTC by Rich Megginson
Modified: 2023-08-16 17:29 UTC (History)
4 users (show)

Fixed In Version: rhel-system-roles-1.22.0-0.16.el8
Doc Type: Enhancement
Doc Text:
Enhancement: cluster and quorum can have distinct passwords Reason: The same quorum hosts can be joined to multiple, separate clusters. Since the passwords of the "hacluster" user on these clusters might be different, it makes sense to configure them separately. Result: I separated `pcs auth` for the cluster and qdevice. I also introduced an new var `ha_cluster_hacluster_qdevice_password`, which is used for qdevice auth. If the new var is not set, qdevice auth will fall back to use `ha_cluster_hacluster_password` like rest of the cluster. This should make the change fully backwards compatible.
Clone Of: 2216481
Environment:
Last Closed:
Type: ---
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-160370 0 None None None 2023-06-21 15:14:33 UTC
Red Hat Issue Tracker RHELPLAN-160371 0 None None None 2023-06-21 15:14:35 UTC

Description Rich Megginson 2023-06-21 15:11:09 UTC
+++ This bug was initially created as a clone of Bug #2216481 +++

The same quorum hosts can be joined to multiple, separate clusters. Since the passwords of the 'hacluster' user on these clusters might be different, it makes sense to configure them separately.  https://github.com/linux-system-roles/ha_cluster/pull/134

Comment 8 michal novacek 2023-07-26 10:14:30 UTC
I have tested that it is possible to configure quorum device with different ha_cluster password than the cluster have with rhel-system-roles-1.22.0-0.16.el8.noarch


Note You need to log in before you can comment on or make changes to this bug.