Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Build support for ACL tokens #27

Closed
gozer opened this issue Jun 15, 2015 · 5 comments
Closed

Build support for ACL tokens #27

gozer opened this issue Jun 15, 2015 · 5 comments
Assignees
@gozer
Labels
enhancement
Milestone
v1.0.0

Comments

@gozer
Copy link
Contributor

gozer commented Jun 15, 2015

After #26 is sorted out, we need to implement it.
@gozer gozer modified the milestones: v1.0, v0.9.0, v1.0.0 Jun 15, 2015
@gozer
Copy link
Contributor Author

gozer commented Jun 24, 2015

🕐 32h

@gozer
Copy link
Contributor Author

gozer commented Jul 7, 2015

  • Consul servers bootstrapped with an acl_master_token provided at launch time
  • Anonymous user kept enabled
    • Initially, all allowed
    • Eventually, locked-down
  • CI will be provided with the master token at launch time
  • CI will be responsible for provisionning ACL tokens for each project/environment/region combos
  • CI will be responsible for managing ACL rules for the deployment
  • CI will pass down the correct token when deploying via a new CF input argument
  • Nubis base images will know to look for that token and conditionnally make the Consul agent use it

@gozer gozer self-assigned this Jul 7, 2015
@gene1wood gene1wood mentioned this issue Jul 20, 2015
Closed
@gene1wood
Copy link

CI will pass down the correct token when deploying via a new CF input argument

@gozer : How will the CF input value be conveyed to the ec2 instances?

@gozer
Copy link
Contributor Author

gozer commented Jul 20, 2015

Right now, the plan is to just use user-data for this.

@gozer gozer mentioned this issue Jul 30, 2015
Merged
gozer added a commit to gozer/nubis-stacks that referenced this issue Aug 17, 2015
@gozer
Add support for an optional ConsulToken to ec2 to enable Consul ACL t…
9dfeacd 
…okens

Contributes to nubisproject/nubis-consul#27
This was referenced Aug 17, 2015
Merged
Open
@gozer
Copy link
Contributor Author

gozer commented Aug 17, 2015

Work will be continued in nubisproject/nubis-ci#79

@gozer gozer closed this as completed Aug 17, 2015
@gozer gozer mentioned this issue Aug 21, 2015
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@gozer gozer

Labels
enhancement
Projects
None yet
Milestone
v1.0.0
Development

No branches or pull requests
2 participants
@gozer @gene1wood