Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-6902

FIWARE.Request.Lab.Lannion.Lannion3.Adding Region Support Keys

    Details

    • Type: extRequest
    • Status: Closed
    • Priority: Major
    • Resolution: Done
    • Fix Version/s: 2021
    • Component/s: FIWARE-LAB-HELP
    • Labels:
      None
    • HD-Node:
      Lannion

      Description

      The region staff team are responsible of the virtual machines instantiated on their servers. Therefore each region staff should have the control of who access the virtual machines for support purposes and set and enforce the corresponding policy. It is not possible if the public keys are shared among all the regions. Additionally, it is also extremely insecure and a problem when a region leaves the federation.
      A new service, called aiakos and deployed aiakos.lab.fiware.org, has been deployed in FIWARE Lab to manage support region ssh and gpg keys, in the endpoint http://aiakos.lab.fiware.org:3000
      As region administrator, you should create your ssh, and gpg keys and upload it into the aikos service (you can obtain information about how create your keys in https://github.com/telefonicaid/fiware-aiakos/blob/develop/doc/README.rst#generating-a-ssh-key).
      To upload your keys into the aiakos service, you should use just a POST operation. You can have documentation about this operation in https://jsapi.apiary.io/apis/fiwareaiakos/reference/aiakos-v1/add-key/post-key.html
      You can find information about why ssh and gpg keys are needed in https://github.com/telefonicaid/fiware-aiakos/blob/develop/doc/README.rst#why-a-ssh-key-and-a-gpg-key-are-needed

        Issue Links

          Activity

          Hide
          lannionsupport Lannion Node Helpdesk added a comment - - edited

          curl --url http://aiakos.lab.fiware.org:3000/v1/support/lannion3/sshkey --header 'accept: text/plain' --header 'content-type: text/plain' --header 'X-Auth-Token: 18d9688b01e84ab09025ee7cddf6e24f'

          The request is empty.

          Show
          lannionsupport Lannion Node Helpdesk added a comment - - edited curl --url http://aiakos.lab.fiware.org:3000/v1/support/lannion3/sshkey --header 'accept: text/plain' --header 'content-type: text/plain' --header 'X-Auth-Token: 18d9688b01e84ab09025ee7cddf6e24f' The request is empty.
          Hide
          henar Henar Muñoz added a comment -

          did you upload the key previously??

          Show
          henar Henar Muñoz added a comment - did you upload the key previously??
          Hide
          lannionsupport Lannion Node Helpdesk added a comment -

          Yes ... I think, i made this work 2 months ago ... i'll try it again.
          ok?

          Show
          lannionsupport Lannion Node Helpdesk added a comment - Yes ... I think, i made this work 2 months ago ... i'll try it again. ok?
          Hide
          henar Henar Muñoz added a comment -

          Hi
          I think now it is working.
          Could you try it?
          Thanks,
          Henar

          Show
          henar Henar Muñoz added a comment - Hi I think now it is working. Could you try it? Thanks, Henar
          Hide
          lannionsupport Lannion Node Helpdesk added a comment -

          Hi Henar,
          Yes now it works ... what was the problem? Just to know for the future.
          Thanks,
          Cristian

          Show
          lannionsupport Lannion Node Helpdesk added a comment - Hi Henar, Yes now it works ... what was the problem? Just to know for the future. Thanks, Cristian

            People

            • Assignee:
              henar Henar Muñoz
              Reporter:
              lannionsupport Lannion Node Helpdesk
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: