Update user keys in running VMs

[andybavier]

As new users are added to / removed from slices, it would be nice if the change is reflected in the authorized_keys file inside the VM as well as the user account used for proxy login. This functionality is outside of the scope of OpenStack's key injection feature, which is only triggered on VM creation.

[gwsapan]

Is this feature request still relevant?

[andybavier]

It's still on our wish list but perhaps it's low priority.

Anyhow, one part of the problem has been solved: dynamically updating the keys for the external user account. Scott added an XOS API call to extract the keys for an instance. On the compute nodes a cron job runs this script to pull the keys from XOS and save them in the right place:

https://github.com/andybavier/opencloud-nova-compute-ansible/blob/onlab/files/usr/local/sbin/download-keys.py

So the missing piece is adding similar functionality inside the VM. Maybe a simple daemon that pulls keys using the XOS API could be injected using cloud-init.