[
https://ovirt-jira.atlassian.net/browse/OVIRT-2282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=37384#comment-37384
]
Barak Korren edited comment on OVIRT-2282 at 7/8/18 11:50 AM:
--------------------------------------------------------------
{quote}
just my set of thoughts, if we have an automation management product, why not
utilize it?
{quote}
Because there is a huge overhead to doing so and very little, if any, benefit.
In this case it will also significantly reduce system reliability, for the cron
job to work all you need is:
# Cron to be configured
# The script to run
# A network connection to Gerrit
With Ansible OTOH you need:
# A way to trigger it - as you mention, but this is a Gerrit group, there is no
built-in mechanism for triggering when it is changed, so now you'll need some
kind of (Jenkins?) job to poll it.
# A host to run Ansible from
# Network connectivity and SSH permissions from this host to all other hosts
# # Network connectivity and SSH permissions from this host to Gerrit
# An inventory you need to maintain (as you mention), or build more automation
around.
So many moving parts you'd need to create and maintain... and then you expect
it to be reliable enough that youre ability to login will depend on it...
really I can't see how Ansible makes sense here.,
was (Author: bkor...@redhat.com):
{quote}
just my set of thoughts, if we have an automation management product, why not
utilize it?
{quote}
Because there is a huge overhead to doing so and very little, if any, benefit.
In this case it will also significantly reduce system reliability, for the cron
job to work all you need is:
# Cron to be configured
# The script to run
# A network connection to Gerrit
With Ansible OTOH you need:
# A way to trigger it - as you mention, but this is a Gerrit group, there is no
built-in mechanism for triggering when it is changed, so now you'll need some
kind of (Jenkins?) job to poll it.
# A host to run Ansible from
# Network connectivity and SSH permissions from this host to all other hosts
# An inventory you need to maintain (as you mention), or build more automation
around.
So many moving parts you'd need to create and maintain... and then you expect
it to be reliable enough that youre ability to login will depend on it...
really I can't see how Ansible makes sense here.,
> use SSH keys from gerrit for infra users
> ----------------------------------------
>
> Key: OVIRT-2282
> URL: https://ovirt-jira.atlassian.net/browse/OVIRT-2282
> Project: oVirt - virtualization made easy
> Issue Type: Improvement
> Reporter: Evgheni Dereveanchin
> Assignee: infra
>
> Opening ticket to discuss possibility of managing user accounts through
> gerrit as it has SSH pubkeys defined.
--
This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100088)
_______________________________________________
Infra mailing list -- infra@ovirt.org
To unsubscribe send an email to infra-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/infra@ovirt.org/message/UWHJG7MAH5EJ3AFCGZBERYL76YN2R4JB/
