ISSUE TYPE
COMPONENT NAME
CLOUDSTACK VERSION
CONFIGURATION
- UI
- SSH API calls not allowed
OS / ENVIRONMENT
N/A
SUMMARY
Dynamic role which does not allow for any of the 'SSH' API calls like: https://cloudstack.apache.org/api/apidocs-4.16/apis/listSSHKeyPairs.html
The user is however still prompted for SSH keypairs during instance deployment.

STEPS TO REPRODUCE
- Create a new Role which does not allow any of the 'ssh' API calls
- Deploy a new Instance
- The UI will still prompt SSH keypair options
EXPECTED RESULTS
The UI should not show the SSH keypair options during deployment.
The only option for users to get SSH keys into the Instance would be using the userdata for cloud-init.
ACTUAL RESULTS
The UI still shows the option for SSH keypairs while the user does not have the permissions for this.
ISSUE TYPE
COMPONENT NAME
CLOUDSTACK VERSION
CONFIGURATION
OS / ENVIRONMENT
N/A
SUMMARY
Dynamic role which does not allow for any of the 'SSH' API calls like: https://cloudstack.apache.org/api/apidocs-4.16/apis/listSSHKeyPairs.html
The user is however still prompted for SSH keypairs during instance deployment.
STEPS TO REPRODUCE
EXPECTED RESULTS
The UI should not show the SSH keypair options during deployment.
The only option for users to get SSH keys into the Instance would be using the userdata for cloud-init.
ACTUAL RESULTS
The UI still shows the option for SSH keypairs while the user does not have the permissions for this.