Project

General

Profile

User story #4441 » metadata.xml

Alex Tkachenko, 2014-02-15 01:47

 
<!--
Copyright 2014 CarrierIQ, Inc.
-->

<TECHNIQUE name="SSH keys removal">
<DESCRIPTION>This technique will check if the specified SSH keys are NOT present in the user's configuration.
It could be used to remove deprecated keys or the personal keys of retired users from the configuration.
</DESCRIPTION>
<COMPATIBLE>
<OS version=">= 4 (Etch)">Debian</OS>
<OS version=">= 4 (Nahant)">RHEL / CentOS</OS>
<OS version=">= 10 SP1 (Agama Lizard)">SuSE LES / DES / OpenSuSE</OS>
<AGENT version=">= 3.5.3">cfengine-community</AGENT>
</COMPATIBLE>

<MULTIINSTANCE>true</MULTIINSTANCE>

<BUNDLES>
<NAME>rudder_disable_ssh_keys</NAME>
</BUNDLES>

<TMLS>
<TML name="sshKeyDisable"/>
</TMLS>

<!-- Policy Instance Settings -->
<TRACKINGVARIABLE>
<SAMESIZEAS>SSH_DISABLE_KEY_TAG</SAMESIZEAS>
</TRACKINGVARIABLE>

<SECTIONS>
<!--
<SECTION name="Global Settings">
<INPUT>
<NAME>SSH_DISABLE_KEY_CONFIG_BASENAME</NAME>
<DESCRIPTION>Basename of configuration file holding keys enabled for the user</DESCRIPTION>
<CONSTRAINT>
<MAYBEEMPTY>false</MAYBEEMPTY>
<TYPE>string</TYPE>
<DEFAULT>authorized_keys</DEFAULT>
</CONSTRAINT>
<UNIQUEVARIABLE>true</UNIQUEVARIABLE>
</INPUT>
</SECTION>
-->
<SECTION name="SSH key" multivalued="true" component="true" componentKey="SSH_DISABLE_KEY_TAG">
<INPUT>
<NAME>SSH_DISABLE_KEY_TAG</NAME>
<DESCRIPTION>Enter a tag to track this key in reports, i.e. "Legacy Key #1" or "Retired User Key"</DESCRIPTION>
<CONSTRAINT>
<MAYBEEMPTY>false</MAYBEEMPTY>
<TYPE>string</TYPE>
</CONSTRAINT>
</INPUT>
<INPUT>
<NAME>SSH_DISABLE_KEY_USERNAME</NAME>
<DESCRIPTION>Which user do you want to remove the key from</DESCRIPTION>
<CONSTRAINT>
<TYPE>string</TYPE>
</CONSTRAINT>
</INPUT>
<INPUT>
<NAME>SSH_DISABLE_KEY_KEYSPEC</NAME>
<DESCRIPTION>Which key do you want to remove</DESCRIPTION>
<CONSTRAINT>
<TYPE>textarea</TYPE>
</CONSTRAINT>
</INPUT>
</SECTION>
</SECTIONS>

</TECHNIQUE>
(3-3/4)