Enable access via ssh-oidc and cloud.egi.eu

[sebastian-luna-valero]

Summary

Would you be happy granting access via ssh-oidc?

Is this something to consider not only for this but for other EGI managed VMs?

---

Related issue :

[github-actions[bot]]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Plan 📖success

Show Plan

``` terraform Acquiring state lock. This may take a few moments... openstack_networking_floatingip_v2.fip: Refreshing state... [id=1a2e1285-0a20-4582-aab9-27255607a862] openstack_compute_secgroup_v2.secgroup: Refreshing state... [id=47779555-2ce1-400c-ba68-d177683c7228] openstack_compute_instance_v2.dashboard: Refreshing state... [id=8ef9fcce-19e4-41c6-ab03-d1730a924510] openstack_compute_floatingip_associate_v2.fip: Refreshing state... [id=147.213.76.217/8ef9fcce-19e4-41c6-ab03-d1730a924510/] No changes. Your infrastructure matches the configuration. Terraform has compared your real infrastructure against your configuration and found no differences, so no changes are needed. Warning: Deprecated Resource with openstack_compute_secgroup_v2.secgroup, on main.tf line 12, in resource "openstack_compute_secgroup_v2" "secgroup": 12: resource "openstack_compute_secgroup_v2" "secgroup" { use openstack_networking_secgroup_v2 resource instead (and 3 more similar warnings elsewhere) Releasing state lock. This may take a few moments... ```

Pusher: @sebastian-luna-valero, Action: pull_request

[github-actions[bot]]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Plan 📖success

Show Plan

``` terraform Acquiring state lock. This may take a few moments... openstack_networking_floatingip_v2.fip: Refreshing state... [id=1a2e1285-0a20-4582-aab9-27255607a862] openstack_compute_secgroup_v2.secgroup: Refreshing state... [id=47779555-2ce1-400c-ba68-d177683c7228] openstack_compute_instance_v2.dashboard: Refreshing state... [id=8ef9fcce-19e4-41c6-ab03-d1730a924510] openstack_compute_floatingip_associate_v2.fip: Refreshing state... [id=147.213.76.217/8ef9fcce-19e4-41c6-ab03-d1730a924510/] Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: -/+ destroy and then create replacement Terraform will perform the following actions: # openstack_compute_floatingip_associate_v2.fip must be replaced -/+ resource "openstack_compute_floatingip_associate_v2" "fip" { ~ id = "147.213.76.217/8ef9fcce-19e4-41c6-ab03-d1730a924510/" -> (known after apply) ~ instance_id = "8ef9fcce-19e4-41c6-ab03-d1730a924510" -> (known after apply) # forces replacement + region = (known after apply) # (1 unchanged attribute hidden) } # openstack_compute_instance_v2.dashboard must be replaced -/+ resource "openstack_compute_instance_v2" "dashboard" { ~ access_ip_v4 = "192.168.10.69" -> (known after apply) + access_ip_v6 = (known after apply) ~ all_metadata = {} -> (known after apply) ~ all_tags = [] -> (known after apply) ~ availability_zone = "nova" -> (known after apply) ~ created = "2021-12-02 14:53:32 +0000 UTC" -> (known after apply) ~ flavor_name = "m1.medium" -> (known after apply) ~ id = "8ef9fcce-19e4-41c6-ab03-d1730a924510" -> (known after apply) ~ image_name = "Ubuntu-20.04-20211006" -> (known after apply) name = "dashboard" + region = (known after apply) - tags = [] -> null ~ updated = "2024-09-04 11:45:09 +0000 UTC" -> (known after apply) ~ user_data = "90023f7e1954389c6ef071f11a027c2e52481ace" -> "c593885502681cba1bb54dedb1ddf5e8fc0f433b" # forces replacement # (6 unchanged attributes hidden) ~ network { ~ fixed_ip_v4 = "192.168.10.69" -> (known after apply) + fixed_ip_v6 = (known after apply) ~ mac = "fa:16:3e:f7:19:1f" -> (known after apply) ~ name = "private-network" -> (known after apply) + port = (known after apply) # (2 unchanged attributes hidden) } } Plan: 2 to add, 0 to change, 2 to destroy. Warning: Deprecated Resource with openstack_compute_secgroup_v2.secgroup, on main.tf line 12, in resource "openstack_compute_secgroup_v2" "secgroup": 12: resource "openstack_compute_secgroup_v2" "secgroup" { use openstack_networking_secgroup_v2 resource instead (and 3 more similar warnings elsewhere) ───────────────────────────────────────────────────────────────────────────── Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now. Releasing state lock. This may take a few moments... ```

Pusher: @sebastian-luna-valero, Action: pull_request

[github-actions[bot]]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Plan 📖success

Show Plan

``` terraform Acquiring state lock. This may take a few moments... openstack_networking_floatingip_v2.fip: Refreshing state... [id=1a2e1285-0a20-4582-aab9-27255607a862] openstack_compute_secgroup_v2.secgroup: Refreshing state... [id=47779555-2ce1-400c-ba68-d177683c7228] openstack_compute_instance_v2.dashboard: Refreshing state... [id=8ef9fcce-19e4-41c6-ab03-d1730a924510] openstack_compute_floatingip_associate_v2.fip: Refreshing state... [id=147.213.76.217/8ef9fcce-19e4-41c6-ab03-d1730a924510/] Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: -/+ destroy and then create replacement Terraform will perform the following actions: # openstack_compute_floatingip_associate_v2.fip must be replaced -/+ resource "openstack_compute_floatingip_associate_v2" "fip" { ~ id = "147.213.76.217/8ef9fcce-19e4-41c6-ab03-d1730a924510/" -> (known after apply) ~ instance_id = "8ef9fcce-19e4-41c6-ab03-d1730a924510" -> (known after apply) # forces replacement + region = (known after apply) # (1 unchanged attribute hidden) } # openstack_compute_instance_v2.dashboard must be replaced -/+ resource "openstack_compute_instance_v2" "dashboard" { ~ access_ip_v4 = "192.168.10.69" -> (known after apply) + access_ip_v6 = (known after apply) ~ all_metadata = {} -> (known after apply) ~ all_tags = [] -> (known after apply) ~ availability_zone = "nova" -> (known after apply) ~ created = "2021-12-02 14:53:32 +0000 UTC" -> (known after apply) ~ flavor_name = "m1.medium" -> (known after apply) ~ id = "8ef9fcce-19e4-41c6-ab03-d1730a924510" -> (known after apply) ~ image_name = "Ubuntu-20.04-20211006" -> (known after apply) name = "dashboard" + region = (known after apply) - tags = [] -> null ~ updated = "2024-09-04 11:45:09 +0000 UTC" -> (known after apply) ~ user_data = "90023f7e1954389c6ef071f11a027c2e52481ace" -> "c593885502681cba1bb54dedb1ddf5e8fc0f433b" # forces replacement # (6 unchanged attributes hidden) ~ network { ~ fixed_ip_v4 = "192.168.10.69" -> (known after apply) + fixed_ip_v6 = (known after apply) ~ mac = "fa:16:3e:f7:19:1f" -> (known after apply) ~ name = "private-network" -> (known after apply) + port = (known after apply) # (2 unchanged attributes hidden) } } Plan: 2 to add, 0 to change, 2 to destroy. Warning: Deprecated Resource with openstack_compute_secgroup_v2.secgroup, on main.tf line 12, in resource "openstack_compute_secgroup_v2" "secgroup": 12: resource "openstack_compute_secgroup_v2" "secgroup" { use openstack_networking_secgroup_v2 resource instead (and 3 more similar warnings elsewhere) ───────────────────────────────────────────────────────────────────────────── Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now. Releasing state lock. This may take a few moments... ```

Pusher: @sebastian-luna-valero, Action: pull_request