Add support for authorized_keys.d/ignition in OKD #2779
Add support for authorized_keys.d/ignition in OKD #2779LorbusChris wants to merge 2 commits intoopenshift:masterfrom
authorized_keys.d/ignition in OKD #2779Conversation
Ignition on OKD may create dropins in authorized_keys.d instead of a single authorized_keys file, so in order to properly manage this file MCO should convert it into a single authorized_keys entry
In OKD, the file does not exist and is therefore newly written via the atomicallyWriteSSHKey function. This change ensures the ownership is explicitly set to the core user and group (uid 1000/gid 1000) as it'll otherwise default to root. Fixes: okd-project/okd#655
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: LorbusChris The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
@LorbusChris: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
|
This will be folded into #2688 /close |
|
@LorbusChris: Closed this PR. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
See also #2778
- What I did
- How to verify it
OKD e2e
- Description for the changelog
daemon: Create missing /home/core/.ssh/authorized_keys file on OKD
daemon: Make SSH keys owned by core user
cc @fortinj66 @bgilbert