Multiple Users in AWS Nodes on Rundeck

422 views
Skip to first unread message

Linbynd

unread,
Feb 5, 2014, 12:46:52 AM2/5/14
to rundeck...@googlegroups.com
I am able to pull the Instance information from AWS account.
However I want to use mulltiple users to authenticate to different boxes. the default user, I was able to change to "Ubuntu"
But in a case where I want to use a different user to authenticate, How could I achive this..

I configured the AWS plugin through the GUI... I am not sure where the file gets created (Sorry Still new to Rundeck).
So in the mapping sections i configured it with the following info "username.default=ubuntu"

Need somebody to help me on this

Thanks in advance

Regards,

Vinit

Greg Schueler

unread,
Feb 7, 2014, 1:13:15 PM2/7/14
to Linbynd, rundeck...@googlegroups.com
Hi Vinit,

the ec2 plugin doesn't currently have a way to make duplicate nodes with different username values.  However you could make the username be parameterized so that the exact value used at runtime depends on a job option.

e.g. set this in your property mapping: username.default=${option.username}

then configure your jobs to have a "username" option.  the option can be free form text entry, or be restricted to one or multiple values.

--
Greg Schueler
--
You received this message because you are subscribed to the Google Groups "rundeck-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rundeck-discu...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Vinit Khandagle

unread,
Feb 8, 2014, 5:01:27 AM2/8/14
to Greg Schueler, rundeck...@googlegroups.com
Hi Greg,

Thanks for the help I will try this setting and see helps my needs. But I guess it will not work for Adoc commands. 

Thanks once again

Regards

Vinit


--
Regards,

VINIT KHANDAGLE
-------------------------------------
9764444998

Moses Lei

unread,
Feb 8, 2014, 12:56:36 PM2/8/14
to rundeck...@googlegroups.com
Hi Vinit, do you mean you want to use only one user per box, but different ones on different boxes? Or multiple users on all boxes? Or a certain set of boxes with two users, and the rest with one?

The best way I've found to mitigate needing different users is to set up a standard user which is not any of the service users (on ec2, that's usually ec2-user or ubuntu) with the correct sudo permissions so that they are able to run commands as the service users, and then using "sudo -u USER CMD" in the job. This solves almost all permutations of different users I mentioned above.

If you're running a mix of different distro instances, you could add a standard user which is not ec2-user or ubuntu into the AMI for all distros. "deploy" or "ops" is my standard choice for such a user.

Moses

--
Moses Lei
Principal, Village Chime LLC
mobile: +1 703 901 5969 | skype: moseslei | yahoo: moseslei

Linbynd

unread,
Feb 17, 2015, 6:56:52 AM2/17/15
to rundeck...@googlegroups.com
Sorry for just a late reply on this.
Well, the first option is what I am trying to do we have different instance in one account (like ec2-user, ubuntu) for centos/amz and ubuntu servers respectively. We at the moment are not using any service accounts but mostly going with the default accounts on the box. But yes to  mitigate the issue with adhoc commands a service account is an hassleless route to take. I haven't yet tried Greg's method, coz we been implementing ansible to do some of the stuff, But I still come back to Rundeck for somethings :). I kinda like the what it provides. At the some point I am trying to use rundeck as a UI for ansible too ;). Hopefully I can get time to try out Greg's method, coz for jobs that's a good option to try out.

- Vinit
Vinit
To unsubscribe from this group and stop receiving emails from it, send an email to rundeck-discuss+unsubscribe@googlegroups.com.

For more options, visit https://groups.google.com/groups/opt_out.
Reply all
Reply to author
Forward
0 new messages