Variable substitution for ssh settings at the node level

[TAYLOR J HAMMERLING]

In the Rundeck documentation, it states that a job option variable can be used to specify the SSH username (reference)

Our rdrunner server is configured this way.

Is it possible to use other job option variables in node configuration, say for ssh-authentication, ssh-key-storage-path and ssh-password-storage-path?

See rdrunner-fqndredacted.com-TEST node below for an example.

 

We have set up this node and are in the process of testing it out.  We have found some powershell scripts (specifically ones that need to double hop Kerberos) don’t like ssh key authentication and openssh server running on windows.  Our preferred method of authentication is key, but having the ability to switch to password if need be would be great!

 

I will keep you all updated on our findings 😊

 

 

 

rdrunner-fqndredacted.com:

    description: Generalized Windows Server RunDeck Node

    hostname: rdrunner-fqndredacted.com

    noadename: rdrunner-fqndredacted.com

    username: ${option.sshuser}

    ssh-authentication: privateKey

    ssh-key-storage-path: keys/RundeckJobs.key

   

rdrunner-fqndredacted.com-TEST:

    description: Generalized Windows Server RunDeck Node

    hostname: rdrunner-fqndredacted.com

    noadename: rdrunner-fqndredacted.com-TEST

    username: ${option.sshuser}

    ssh-authentication: ${option.sshauth}

    ssh-key-storage-path: ${option.sshkey}

    ssh-password-storage-path: ${option.sshpw}

[rac...@rundeck.com]

Hi Taylor,

You can use the "ssh-password-option" in your node definition file, take a look at this post (there you can see how to set a "job level authentication" node).

Related to the "ssh-authentication" attribute, this attribute doesn't expect an option from Rundeck jobs, you can suggest that here.

Hope it helps!

[TAYLOR J HAMMERLING]

Thanks for the quick reply!  I’ll definitely suggest adding in the ability to use an option for “ssh-authentication”

--
You received this message because you are subscribed to the Google Groups "rundeck-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rundeck-discu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/rundeck-discuss/68d1c278-b17a-45fb-a4bf-8902dc3eb80cn%40googlegroups.com.