ssh keys question

zerobane · 08-24-2015, 05:19 PM

Hello,

Have a theoretical question;

If you have a product that is appliance; automated by ansible or salt; so root shared SSH from the mgmt nodes. Has 50+ nodes; for a typical hadoop stack.

Do you have 1 ssh key for all 50 nodes? Or would you have 50+ keys stuffed into each authorized_keys file?

Something else?

Turbocapitalist · 08-25-2015, 03:10 AM

How about one key per node?

sundialsvcs · 08-26-2015, 12:02 AM

Intuitively, I would hazard a guess that a single certificate might be used to secure all 50+ conversations ... simply because I cannot readily think of a scenario that would call for each conversation to use a certificate that is unique to it.

Do you "trust" the situation? Do you have absolute control over it? Does anyone, anywhere, have reason (and capacity) to be "an imposter?"