Add ObjectScale to SSH mesh (admin bootstrap, root via keys)

ObjectScale blocks root SSH by default; only admin accepts login.
Bootstrap installs cluster key for admin and root; document in ssh-mesh.md.
This commit is contained in:
Lakehouse Admin
2026-05-19 22:50:32 +02:00
parent f3d24634e4
commit f0c56f137c
6 changed files with 285 additions and 29 deletions
+12 -2
View File
@@ -64,11 +64,14 @@ $(grep -v '^#' "$HOSTS_FILE" | grep -v '^$')
HOSTS
mkdir -p /root/.ssh/config.d
cat > /root/.ssh/config.d/99-atc-lab.conf <<'CFG'
Host atc-* *.dell-atc.lan pve01 proxmox
User root
Host atc-* *.dell-atc.lan pve01 proxmox objectscale
IdentityFile ~/.ssh/atc_cluster
StrictHostKeyChecking accept-new
ConnectTimeout 5
Host atc-objectscale objectscale 10.0.20.111
User admin
Host atc-* pve01 proxmox
User root
CFG
grep -q 'config.d' /root/.ssh/config 2>/dev/null || \
printf '%s\n' 'Include config.d/*.conf' > /root/.ssh/config
@@ -95,4 +98,11 @@ ssh "${SSH_OPTS[@]}" -i "$TMPDIR/atc_cluster" root@10.0.21.45 '
echo "OK=${ok} FAIL=${fail}"
'
echo ""
echo "==> ObjectScale (admin bootstrap)"
if [[ -x "${REPO_ROOT}/scripts/setup/setup-objectscale-ssh.sh" ]]; then
OBJECTSCALE_PASSWORD="${OBJECTSCALE_PASSWORD:-}" "${REPO_ROOT}/scripts/setup/setup-objectscale-ssh.sh" || \
echo " ObjectScale skipped (set OBJECTSCALE_PASSWORD if needed)"
fi
echo "Done. See docs/ssh-mesh.md"