Methods and apparatus to manage credentials in hyper-converged infrastructures
Methods, apparatus, systems and articles of manufacture manage credentials in hyper-converged infrastructures are disclosed. An example method includes establishing, by executing an instruction with at least one processor, a communication between a software defined data center manager of the hyper-converged infrastructure and a component of the hyper-converged infrastructure using first credentials included in a known hosts file. The example method also includes generating, by executing an instruction with the at least one processor, second credentials at the component in response to a power-on event detected by the software defined data center manager. The example method also includes recording, by executing an instruction with the at least one processor, the second credentials at the known host file.
1. An apparatus to manage credentials in a hyper-converged infrastructure, the apparatus comprising:
a credentials manager to establish a communication between a software defined data center manager of the hyper-converged infrastructure and a component of the hyper-converged infrastructure using first credentials included in a known hosts file, the credentials manager including, at least:
a keys manager to:
generate a public-private key pair at the component in response to a power-on event detected by the software defined data center manager;
record a public key portion of the public-private key pair in the known hosts file;
encrypt the public key portion of the public-private key pair using a shared key stored in the credentials manager, a private key portion of the public-private key pair stored at the component;
record the encrypted public key portion of the public-private key pair in a keys database;
in response to deleting the known hosts file, retrieve the encrypted public key portion of the public-private key pair from the keys database; and
record a decrypted public key portion of the public-private key pair in a new known hosts file.
2. The apparatus of claim 1 , wherein the keys manager is to encrypt the public key portion of the public-private key pair at the software defined data center manager.
3. The apparatus of claim 2 , wherein to synchronize the known hosts file the keys manager is to, after retrieving the encrypted public key portion of the public-private key pair from the keys database, decrypt the retrieved public key portion of the public-private key pair.
4. The apparatus of claim 3 , wherein the keys manager is to synchronize the known hosts file in response to a change detected in the keys database.
5. The apparatus of claim 3 , wherein the keys manager is to synchronize the known hosts file in response to a reboot event of the software defined data center manager.
6. The apparatus of claim 3 , wherein the keys manager is to synchronize the known hosts file in response to a determination that the known hosts file is unavailable.
7. The apparatus of claim 1 , wherein the shared key stored in the credentials manager is accessible by a second credentials manager.
8. A method to manage credentials in a hyper-converged infrastructure, the method comprising:
establishing, by executing an instruction with at least one processor, a communication between a software defined data center manager of the hyper-converged infrastructure and a component of the hyper-converged infrastructure using first credentials included in a known hosts file;
generating, by executing an instruction with the at least one processor, a public-private key pair at the component in response to a power-on event detected by the software defined data center manager;
recording, by executing an instruction with the at least one processor, a public key portion of the public-private key pair in the known host file;
encrypting the public key portion of the public-private key pair using a shared key stored in a credentials manager, a private key portion of the public-private key pair stored at the component;
recording the encrypted public key portion of the public-private key pair in a keys database;
in response to deleting the known hosts file, retrieving, by executing an instruction with the at least one processor, the encrypted public key portion of the public-private key pair from the keys database; and
recording, by executing an instruction with the at least one processor, a decrypted public key portion of the public-private key pair in a new known hosts file.
9. The method of claim 8 , wherein the public key portion of the public-private key pair are encrypted at the software defined data center manager.
10. The method of claim 9 , further including synchronizing the known hosts file by, after retrieving the encrypted public key portion of the public-private key pair from the keys database, decrypting the retrieved credentials.
11. The method of claim 10 , wherein the synchronizing of the known hosts file is performed in response to a change detected in the keys database.
12. The method of claim 10 , wherein the synchronizing of the known hosts file is performed in response to a reboot event of the software defined data center manager.
13. The method of claim 10 , wherein the synchronizing of the known hosts file is performed in response to determining the known hosts file is unavailable.
14. The method of claim 8 , wherein the shared key stored in the credentials manager is accessible by a second credentials manager.
15. A non-transitory computer readable storage medium comprising instructions that, when executed, cause a machine to at least:
establish a communication between a software defined data center manager of the hyper-converged infrastructure and a component of the hyper-converged infrastructure using first credentials included in a known hosts file;
generate a public-private key pair at the component in response to a power-on event detected by the software defined data center manager;
record a public key portion of the public-private key pair in the known host file;
encrypt the public key portion of the public-private key pair using a shared key stored in a credentials manager, a private key portion of the public-private key pair stored at the component;
record the encrypted public key portion of the public-private key pair in a keys database;
in response to deleting the known hosts file, retrieve the encrypted public key portion of the public-private key pair from the keys database; and
record a decrypted public key portion of the public-private key pair in a new known hosts file.
16. The non-transitory storage medium of claim 15 , wherein the instructions, when executed, further cause the machine to encrypt the public key portion of the public-private key pair at the software defined data center manager.
17. The non-transitory storage medium of claim 16 , wherein to synchronize the known hosts file, the instructions, when executed, further cause the machine to, after retrieving the encrypted public key portion of the public-private key pair from the keys database, decrypt the retrieved credentials.
18. The non-transitory storage medium of claim 17 , wherein the instructions, when executed, further cause the machine to synchronize the known hosts file in response to a change detected in the keys database.
19. The non-transitory storage medium of claim 17 , wherein the instructions, when executed, further cause the machine to synchronize the known hosts file in response to a reboot event of the software defined data center manager.
20. The non-transitory storage medium of claim 17 , wherein the instructions, when executed, further cause the machine to synchronize the known hosts file in response to a determination that the known hosts file is unavailable.
21. The non-transitory storage medium of claim 15 , wherein the shared key stored in the credentials manager is accessible by a second credentials manager.