Details
-
Type:
extRequest
-
Status: Closed
-
Priority:
Major
-
Resolution: Done
-
Fix Version/s: 2021
-
Component/s: FIWARE-TECH-HELP
-
Labels:None
-
HD-Chapter:Cloud
-
HD-Enabler:Cloud Portal
-
HD-Node:Britanny
Description
The region staff team are responsible of the virtual machines instantiated on their servers. Therefore each region staff should have the control of who access the virtual machines for support purposes and set and enforce the corresponding policy. It is not possible if the public keys are shared among all the regions. Additionally, it is also extremely insecure and a problem when a region leaves the federation.
A new service, called aiakos and deployed aiakos.lab.fiware.org, has been deployed in FIWARE Lab to manage support region ssh and gpg keys, in the endpoint http://aiakos.lab.fiware.org:3000
As region administrator, you should create your ssh, and gpg keys and upload it into the aikos service (you can obtain information about how create your keys in https://github.com/telefonicaid/fiware-aiakos/blob/develop/doc/README.rst#generating-a-ssh-key).
To upload your keys into the aiakos service, you should use just a POST operation. You can have documentation about this operation in https://jsapi.apiary.io/apis/fiwareaiakos/reference/aiakos-v1/add-key/post-key.html
You can find information about why ssh and gpg keys are needed in https://github.com/telefonicaid/fiware-aiakos/blob/develop/doc/README.rst#why-a-ssh-key-and-a-gpg-key-are-needed
Issue Links
Activity
| Transition | Time In Source Status | Execution Times | Last Executer | Last Execution Date | |||||
|---|---|---|---|---|---|---|---|---|---|
|
336d 23h 50m | 1 | Alvaro Alonso | 18/Jan/18 10:27 AM | |||||
|
22h 19m | 1 | Fernando Lopez | 19/Jan/18 8:46 AM | |||||
|
20d 3h 36m | 1 | Alvaro Alonso | 08/Feb/18 12:23 PM | |||||
|
1s | 1 | Alvaro Alonso | 08/Feb/18 12:23 PM |
| Fix Version/s | 2021 [ 12600 ] |
| Resolution | Done [ 10000 ] | |
| Status | Answered [ 10104 ] | Closed [ 6 ] |
| Status | In Progress [ 3 ] | Answered [ 10104 ] |
| HD-Chapter | Cloud [ 10837 ] | |
| HD-Enabler | Cloud Portal [ 10860 ] |
| Component/s | FIWARE-TECH-HELP [ 10278 ] | |
| Component/s | FIWARE-LAB-HELP [ 10279 ] |
| Resolution | Dismissed [ 10102 ] | |
| Status | Closed [ 6 ] | In Progress [ 3 ] |
| Summary | FIWARE.Request.Lab.Brittany.Adding Region Support Keys | FIWARE.Request.Lab.Britanny.Brittany.Adding Region Support Keys |
| HD-Enabler | Ops - Toolkit [ 10909 ] | |
| HD-Chapter | Ops [ 10843 ] |
| Resolution | Dismissed [ 10102 ] | |
| Status | Open [ 1 ] | Closed [ 6 ] |
| Assignee | Fernando Lopez [ fla ] | Alvaro Alonso [ aalonsog ] |
| Link | This issue blocks LAB-1564 [ LAB-1564 ] |
| Link | This issue blocks LAB-1497 [ LAB-1497 ] |
| Link | This issue blocks LAB-1395 [ LAB-1395 ] |
| Assignee | Henar Muñoz [ henar ] | Fernando Lopez [ fla ] |
| HD-Chapter | Ops [ 10843 ] | |
| HD-Enabler | Ops - Toolkit [ 10909 ] |
| Link | This issue blocks LAB-1328 [ LAB-1328 ] |
We successfully uploaded ssh and gpg keys in aiakos service.
When I launch an instance I don't see these keys in 5.Summary, the fields are empty (and they are not uploaded in any instance).
FIWARE Support
fiware-support:
sshkey:
gpgkey: |
Can you put these keys in Cloud Portal as you did for Lannion3 Node?
BR,
Cristian
| Assignee | Lannion Node Helpdesk [ lannionsupportteam ] | Henar Muñoz [ henar ] |
| HD-Node | Lannion [ 10850 ] | Britanny [ 11100 ] |
New feature for new Cloud Portal release: CLD-1656