Hi Suresh,

Thank you very much and this is interesting work to get started. I did some
research on how the existing credential store operates and the feasibility
of replacing it with HashiCorp Vault. At the moment, I am in the process of
properly documenting the findings on how to integrate Vault with Airavata.
I will share them soon. Upon review we will be able to further discuss on
how we are going to proceed.

Thanks,
Dammina

On Sat, Nov 17, 2018 at 4:35 AM Suresh Marru <[email protected]> wrote:

> HI Dammina,
>
> Sorry for late response on your request. I have a suggestion for a
> contribution:
>
> Airavata manages credentials using a internal component called Credential
> Store [1] and [2]. Since the original development of this component the
> credential store usage has got more confined to basically managing SSH keys
> and clients keys and secrets (the paper talks about MyProxy integration
> which is no longer used). The open source Vault project [3] provides these
> functionalities.
>
> Would you be interested in doing a proof of concept with Vault and compare
> and contrast with credential store? If there is a justification, we would
> like to migrate off credential store to Vault.
>
> Cheers,
> Suresh
>
> [1] -
> https://github.com/apache/airavata/tree/develop/modules/credential-store
> [2] - https://ieeexplore.ieee.org/document/6846480
> [3] - https://www.vaultproject.io/
>
> On Oct 5, 2018, at 1:38 AM, Dammina Sahabandu <[email protected]> wrote:
>
> Hi Devs,
>
> I’m Dammina, a graduate from department of Computer Science and
> Engineering, University of Moratuwa. I have been involved with Apache
> Software Foundation for few years now. Currently, I am a member of PMC for
> Bloodhound project.
>
> Among the top level projects of the ASF, I have noticed Airavata as one of
> the most interesting and active projects.  Therefore, I believe, it is
> great to start actively involve with the project. And for that, it would be
> really helpful if you can provide me with some pointers to get started.
>
> Thanks,
> Dammina
>
>
>

Reply via email to