Hi Suresh/All, I did a preliminary study of existing Airavata credential store and how HashiCorp Vault can be integrated. Please find the document [1] on my findings and provide your feedback.
Thanks, Dammina [1] https://docs.google.com/document/d/1-WYAz3b5RTu8YRxaOeBj4GncQUI-aAyXcFoFxpipREA/edit?usp=sharing On Mon, Nov 19, 2018 at 7:02 PM Dammina Sahabandu <[email protected]> wrote: > Hi Suresh, > > Thank you very much and this is interesting work to get started. I did > some research on how the existing credential store operates and the > feasibility of replacing it with HashiCorp Vault. At the moment, I am in > the process of properly documenting the findings on how to integrate Vault > with Airavata. I will share them soon. Upon review we will be able to > further discuss on how we are going to proceed. > > Thanks, > Dammina > > On Sat, Nov 17, 2018 at 4:35 AM Suresh Marru <[email protected]> wrote: > >> HI Dammina, >> >> Sorry for late response on your request. I have a suggestion for a >> contribution: >> >> Airavata manages credentials using a internal component called Credential >> Store [1] and [2]. Since the original development of this component the >> credential store usage has got more confined to basically managing SSH keys >> and clients keys and secrets (the paper talks about MyProxy integration >> which is no longer used). The open source Vault project [3] provides these >> functionalities. >> >> Would you be interested in doing a proof of concept with Vault and >> compare and contrast with credential store? If there is a justification, we >> would like to migrate off credential store to Vault. >> >> Cheers, >> Suresh >> >> [1] - >> https://github.com/apache/airavata/tree/develop/modules/credential-store >> [2] - https://ieeexplore.ieee.org/document/6846480 >> [3] - https://www.vaultproject.io/ >> >> On Oct 5, 2018, at 1:38 AM, Dammina Sahabandu <[email protected]> wrote: >> >> Hi Devs, >> >> I’m Dammina, a graduate from department of Computer Science and >> Engineering, University of Moratuwa. I have been involved with Apache >> Software Foundation for few years now. Currently, I am a member of PMC for >> Bloodhound project. >> >> Among the top level projects of the ASF, I have noticed Airavata as one >> of the most interesting and active projects. Therefore, I believe, it is >> great to start actively involve with the project. And for that, it would be >> really helpful if you can provide me with some pointers to get started. >> >> Thanks, >> Dammina >> >> >>
