wtsi-hgi / hgi-systems

Orchestration and configuration management of hgi systems (using terraform & ansible)
GNU General Public License v3.0
3 stars 3 forks source link

Security issue with allowing users SSH access as `spark` due to common private key #44

Open colin-nolan opened 7 years ago

colin-nolan commented 7 years ago

All Spark compute nodes are accessible from the master node using thespark user's SSH key. This key is shared across all Spark installations, meaning customers cannot be given SSH access to the spark user (e.g. to manage their data directories) because they will be able to access any user's compute nodes.