[ https://ovirt-jira.atlassian.net/browse/OVIRT-2282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=37384#comment-37384 ] Barak Korren edited comment on OVIRT-2282 at 7/8/18 11:50 AM: -------------------------------------------------------------- {quote} just my set of thoughts, if we have an automation management product, why not utilize it? {quote} Because there is a huge overhead to doing so and very little, if any, benefit. In this case it will also significantly reduce system reliability, for the cron job to work all you need is: # Cron to be configured # The script to run # A network connection to Gerrit With Ansible OTOH you need: # A way to trigger it - as you mention, but this is a Gerrit group, there is no built-in mechanism for triggering when it is changed, so now you'll need some kind of (Jenkins?) job to poll it. # A host to run Ansible from # Network connectivity and SSH permissions from this host to all other hosts # # Network connectivity and SSH permissions from this host to Gerrit # An inventory you need to maintain (as you mention), or build more automation around. So many moving parts you'd need to create and maintain... and then you expect it to be reliable enough that youre ability to login will depend on it... really I can't see how Ansible makes sense here., was (Author: bkorren@redhat.com): {quote} just my set of thoughts, if we have an automation management product, why not utilize it? {quote} Because there is a huge overhead to doing so and very little, if any, benefit. In this case it will also significantly reduce system reliability, for the cron job to work all you need is: # Cron to be configured # The script to run # A network connection to Gerrit With Ansible OTOH you need: # A way to trigger it - as you mention, but this is a Gerrit group, there is no built-in mechanism for triggering when it is changed, so now you'll need some kind of (Jenkins?) job to poll it. # A host to run Ansible from # Network connectivity and SSH permissions from this host to all other hosts # An inventory you need to maintain (as you mention), or build more automation around. So many moving parts you'd need to create and maintain... and then you expect it to be reliable enough that youre ability to login will depend on it... really I can't see how Ansible makes sense here.,

use SSH keys from gerrit for infra users ----------------------------------------

Key: OVIRT-2282 URL: https://ovirt-jira.atlassian.net/browse/OVIRT-2282 Project: oVirt - virtualization made easy Issue Type: Improvement Reporter: Evgheni Dereveanchin Assignee: infra

Opening ticket to discuss possibility of managing user accounts through gerrit as it has SSH pubkeys defined.

-- This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100088)