I have a Juju Charm for specific cluster service. In manual deployments, the password-less SSH access for the cluster administrator is enabled between the control-system nodes and the other nodes in the cluster. I'd like my Juju Charm to automate that process.
In simple terms :
- The service is deployed across nodes
- Each node has a user account created for the service-owner
- 1 or more of those nodes will have the control system packages
- The goal is passwordless ssh access to ALL nodes for the service-owner on that small sub-set of nodes
I was thinking about shoving the public key into a relation property for the peer relation between the nodes ... and just reading it from the other end. But the mechanics of relation-relation-changed are such that I'm already seeing that routine called n-factorial times for an n-node cluster. I'd rather not add more complexity there if I can avoid it.