dsh is a lwrp for setting up dsh group files and mapping permissions between user accounts and administrative users to allow easy bootstrapping of distributed access to a group of nodes via dsh.
The test recipe is a placeholder for a specific user/group setup with the following attributes:
- group: testing
- user: test1
- admin_user: test2
There's currently one provider, "group", which does all the heavy lifting.
The provider uses Chef's search functionality to discover and update the group and user mappings dsh makes use of. Mappings are between accounts on the host system and the the target systems.
- Updates known_hosts on the host system with the target systems
- Updates authorized_keys on the target systems with every admin_user's public key
- group: The dsh group name
- user: The user account to manipulate on the target systems
- admin_user: The admin user account on the host system
- admin_pubkey: (optional) The admin user's public SSH key
- network: (optional) An osops_utils-style network to use instead of the FQDN
dsh_group "testing" do user "test2" admin_user "test1" #provider "dsh_group" # default end
Author:: William Kelly (william.kelly@rackspace.com)
Copyright 2012, Rackspace, Inc.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.