brainsciencecenter / slurm-gcp Goto Github PK

by default users get the instance's service account for their credentials
Only slurm should be getting authorization to start and stop machines.

Needs to nuke
/etc/ssh/ssh_host*
/salt/minion/minion_id
/etc/munge/*
/var/logs/*
/root/.bash_history

Need user management scripts to interface with google cloud identity
Need max uid, gid
Need to update ssh keys for accounts
Need to be able to move users in and out of groups
How do we push updates to the cluster /etc/passwd /etc/group files?

Changed
curl -L https://bootstrap.saltstack.com | sudo sh -s -- git develop
to
curl -L https://bootstrap.saltstack.com | sudo sh -s -- -x python3 git develop

Where is access granted to users to login to a gcp machine?
Once they have an account, does removing them from the access group remove their access?