How do I connect to a Jira cluster server on Azure hosted instance?

Question

I am able to ssh to system@xxx.cloudapp.azure.com with no problems using the keys I created when deploying the instance. The system account had no existing keys so I used scp to copy the generated keys to the jump box. Next I tried to ssh to one of the cluster nodes, but that fails as follows:

$ ssh -i ~/.ssh/jira_rsa system@10.0.2.4
system@10.0.2.4: Permission denied (publickey).I also tried the Azure portal serial console logging in as system, but the system password I configured that works to login into the Jira web UI doesn't work in the serial console.How am I supposed to connect to this cluster node vm?

Trent Hashimoto · Answer

The documentation does confirm that  you have to SSH to the jump box then SSH to a specific node. See https://confluence.atlassian.com/enterprise/administering-jira-software-data-center-on-azure-969535567.html

I ran into the same issue and was able to resolve the issue this way:

* Go to your Jira cluster -> Networking and ensure there is a an Inbound rule to allow SSH connections from the JumpBox VM's IP address.
* Go to the cluster's Instances -> click on  a specific instance -> Connect -> SSH
* Click on Replace/reset your SSH private key
* Do Add SSH public key and generate a new one. Note that there should be an info box on screen with the following information: Once the scale set is updated, all new VMs have the new credentials. Existing VMs only have the new credentials if they are updated to the latest model and then reimaged.
* Download the new public key and uploaded it to your JumpBox ~/.ssh directory
* Go back to the Instance and update and reimage it

Now, connections from the JumpBox to the cluster node should be accepted.

Connecting to JumpBox from your machine:

ssh -i ~/.ssh/jumpbox_key user@jumpbox.westus2.cloudapp.azure.com

Then, connecting to the node from JumpBox:

ssh -i ~/.ssh/node_key user@10.0.2.5

Ismael Jimoh · Answer

Hi @Dave Brennan

My expectation from experience here is you should have the public key from the jump server already present on the Node you are trying to access because only then would the authentication process work here. This is different from your personal public key.

If the instance is already up and running, I will check with whoever has access to grant the jump server access to the nodes. They can then share this with you so you can access it.

The above suggestion is based on my understanding that you connect to a jump server and from the jump server, you connect to a server hosting the different Jira nodes.

Regards.