knife-proxmox-ve 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bff2fdcc58a1aeadf186e297e838ddb91510536f7cf0169ccb25a3091c590931
-  data.tar.gz: 9cdc6b30bfe1a9d8da2feb3f8cf622973dbb0ab553c13c10a3a9729ea444a46a
+  metadata.gz: 5d5214d06c2b3094351f1e2824fc0d3e9cceba436f2053bb32001b41fe18ea5c
+  data.tar.gz: fad9ae85bb184f7dd8fdb6e54cac5a15a8f9036f1f5f4a07b939cd0a4a0e3f3a
 SHA512:
-  metadata.gz: 118d4dd196b869f226c11801b728b4d71661c9aa9756210b3857bf6f629c45515199a9b2e0b9b0f27b07bbf1cee995de81eaa1e1e8102a228d415eae7a94a460
-  data.tar.gz: b2b0d7b679086f772f7d844c22635c9a749110405362788ece0e7de99a23eec68a97c1e7e18ddfdad30500a5bfb606e8f8ed4b396a61faa9a32a0a1a4f2226ae
+  metadata.gz: c4d3a3bdff34585a82c46888572244512f06a7a17b94475b135f2d5f520c2b47d983e07f69cb40baa2ebc2fca8526db2cd5c6c7928ab1f778d2db28061167a05
+  data.tar.gz: 9008cdcd204db73879b3f2a4602e202d821dd70b9df217ebc8ff90e59342e7ff805c516497cd7c62970c531fd6f04df7e69f2fac84305836ba1f9faf821f7630

data/README.md

@@ -45,12 +45,16 @@ knife[:proxmox_clusters] = {
     verify_ssl:   true,                  # optional (default true); false warns every run
 
     # Optional per-cluster provisioning defaults (any CLI flag overrides these):
-    storage:      "local-lvm",
-    bridge:       "vmbr0",
-    ciuser:       "ubuntu",
-    nameserver:   "10.0.0.1",
-    searchdomain: "example.com",
-    target_node:  nil,
+    storage:        "local-lvm",
+    bridge:         "vmbr0",
+    ciuser:         "ubuntu",
+    ssh_public_key: "~/.ssh/id_ed25519.pub", # default authorized key; satisfies the auth
+                                             # requirement without --ssh-public-key. For
+                                             # `vm bootstrap`, :ciuser also becomes the
+                                             # default --connection-user.
+    nameserver:     "10.0.0.1",
+    searchdomain:   "example.com",
+    target_node:    nil,
   },
 }
 
@@ -150,13 +154,14 @@ Both commands share the provisioning flags below.
 | `--bridge vmbrN` / `--vlan TAG` | net0 bridge and VLAN tag (needs a VLAN-aware bridge). |
 | `--ip CIDR\|dhcp` / `--gateway IP` / `--prefix N` | Static IPv4 (`10.0.10.5/24`, or a bare IP with `--prefix`) or `dhcp`. |
 | `--nameserver IP` / `--searchdomain DOMAIN` | cloud-init DNS. |
-| `--ciuser USER` | cloud-init user. |
-| `--ssh-public-key PATH` | Public key injected via cloud-init (preferred auth). |
+| `--ciuser USER` | cloud-init user. For `vm bootstrap`, also the default `--connection-user`. |
+| `--ssh-public-key PATH` | Public key injected via cloud-init (preferred auth). Falls back to the cluster's `:ssh_public_key`. |
 | `--cipassword` | Prompt (no echo) for a cloud-init password; or set `KNIFE_PROXMOX_CIPASSWORD`. |
 | `--clone-timeout SEC` / `--boot-timeout SEC` | Clone and boot/SSH wait limits (default 600 / 300). |
 
 For `vm bootstrap`, the standard `knife bootstrap` options are inherited: `-N/--node-name`,
-`-r/--run-list`, `-E/--environment`, `--connection-user`, `--ssh-identity-file`,
+`-r/--run-list`, `-E/--environment`, `--connection-user` (defaults to the resolved `:ciuser`,
+since cloud-init creates the guest account under that name), `--ssh-identity-file`,
 `--bootstrap-version`, `--ssh-verify-host-key` (defaults to `:accept_new` for the
 freshly-created host), `--yes`, etc. They do not apply to `vm create`, which never bootstraps.
 

data/lib/chef/knife/helpers/proxmox_vm_provision.rb

@@ -110,7 +110,8 @@ class Chef
 
           option :ssh_public_key,
             long:        "--ssh-public-key PATH",
-            description: "Path to an SSH PUBLIC key authorized for the cloud-init user."
+            description: "Path to an SSH PUBLIC key authorized for the cloud-init user. " \
+                         "Defaults to the cluster's :ssh_public_key when set."
 
           option :cipassword,
             long:        "--cipassword",
@@ -246,8 +247,8 @@ class Chef
         return if @ssh_public_key || @cipassword
 
         ui.fatal!(
-          "no SSH credential for the new VM: pass --ssh-public-key PATH, or provide a " \
-          "cloud-init password via #{ENV_CIPASSWORD} or --cipassword"
+          "no SSH credential for the new VM: pass --ssh-public-key PATH (or set the cluster's " \
+          ":ssh_public_key), or provide a cloud-init password via #{ENV_CIPASSWORD} or --cipassword"
         )
       end
 
@@ -264,7 +265,7 @@ class Chef
       # looks like a private key (a common copy-paste mistake that must never be
       # uploaded as an authorized key).
       def resolve_ssh_public_key
-        path = config[:ssh_public_key]
+        path = from_cli_or_cluster(:ssh_public_key)
         return nil if blank?(path)
 
         @ssh_public_key_path = File.expand_path(path)

data/lib/chef/knife/proxmox_vm_bootstrap.rb

@@ -95,6 +95,11 @@ class Chef
       def apply_provision_auth!(spec)
         super
 
+        # cloud-init creates the guest account as :ciuser, so the bootstrap must connect as that
+        # same user. Fall back to it when the operator did not pass an explicit --connection-user.
+        ciuser = from_cli_or_cluster(:ciuser)
+        config[:connection_user] ||= ciuser if ciuser
+
         config[:connection_password] = @cipassword if @cipassword
 
         return unless @ssh_public_key

data/lib/knife-proxmox-ve/version.rb

@@ -2,6 +2,6 @@
 
 module Knife
   module Proxmox
-    VERSION = "0.1.2"
+    VERSION = "0.1.3"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: knife-proxmox-ve
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Piotr Wojcieszonek