On 12.11.19 16:29, Sage Weil wrote:
Right now we have an extremely minimal footprint on
the managed host,
but the cost is a root-authorized key. I'm trying to figure out how to
reduce that exposure without (significantly) increasing the footprint
or complexity for the user...
I may be totally wrong here but in larger or even
hyper-converged
environments, isn't there always a "central" admin server? You have to
keep your servers up2date anyway and therefor you need any automated way
to update the servers. So I'm unsure if this is really a problem at that
point.
--
SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, D 90409 Nürnberg
GF:Geschäftsführer: Felix Imendörffer, (HRB 36809, AG München)