SSH Server#

Management → SSSSH Servers

The SSHServer resource enables a node to function as an SSH server for remote login.

OS-specific limitations#

Some operating systems have specific implementation details that are worth considering.

SR OS#

On SR OS, SSH is enabled by default in the ManagementRouter and the DefaultRouter.

• If access in both should be disabled, create an SSHServer resource on either the ManagementRouter or the DefaultRouter and set the enabled property to false.
• If one should be enabled but not the other, consider using CPM filters.

SR Linux#

On SR Linux, SSH is enabled by default in the ManagementRouter. If access should be disabled, create an SSHServer resource that targets the ManagementRouter and set the enabled property to false.

Dependencies#

Each SSHServer resource targets either a ManagementRouter, a DefaultRouter, or a Router. While only one of the three is required, all three are listed as dependencies.

ManagementRouter#

If the SSHServer is reachable through a ManagementRouter, the resource referenced by the router property must exist.

DefaultRouter#

If the SSHServer is reachable through a DefaultRouter, the resource referenced by the router property must exist.

Label selectors may be used to select multiple DefaultRouters.

Router#

If the SSHServer is reachable through a Router, the resource referenced by the router property must exist.

Referenced resources#

The SSHServer does not reference any other EDA resources.

Examples#

apiVersion: management.eda.nokia.com/v1
kind: SSHServer
metadata:
  name: ssh-server
  namespace: eda
spec:
  enablePasswordAuthentication: false
  enabled: true
  router: my-router
  routerKind: Router

cat << 'EOF' | kubectl apply -f -
apiVersion: management.eda.nokia.com/v1
kind: SSHServer
metadata:
  name: ssh-server
  namespace: eda
spec:
  enablePasswordAuthentication: false
  enabled: true
  router: my-router
  routerKind: Router
EOF

Custom Resource Definition#

To browse the Custom Resource Definition go to crd.eda.dev.