AWS pcs documentation change
Summary
Added note about new authentication key path specification methods for Slurm 25.11+ while maintaining backward compatibility
Security assessment
This change documents new command-line options for specifying authentication key paths (--jwks-file and --key-file) as alternatives to environment variables. While authentication is a security concern, this appears to be a feature enhancement rather than addressing a specific security issue. The documentation update helps users implement secure authentication methods.
Diff
diff --git a/pcs/latest/userguide/multi-cluster-login-script.md b/pcs/latest/userguide/multi-cluster-login-script.md index a182eaf9c..c7a9525eb 100644 --- a//pcs/latest/userguide/multi-cluster-login-script.md +++ b//pcs/latest/userguide/multi-cluster-login-script.md @@ -31,0 +32,4 @@ This script requires Slurm version 25.05 or later. +###### Note + +For Slurm 25.11 or later, you can use `sackd --jwks-file <path>` and `sackd --key-file <path>` to specify authentication key paths instead of the `SLURM_SACK_JWKS` environment variable. The `SLURM_SACK_JWKS` approach remains supported for backward compatibility with Slurm 25.05 clusters. +