Secrets Store documentation

[thebe14]

Documented the new service EGI Secrets Store. Added a page with the service's design/architecture, but set it as draft. Should we publish it?

[gwarf]

@thebe14 can you remove the draft state so that we can see the live preview? I guess it's fine to include all the relevant information that can help users.

edit: I've removed the draft directive, let's see how it looks and if we want to keep/drop/adapt stuff

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[gwarf]

All this look great, I think it would be useful to publish the architecture too. I've seen a few sentences that may benefit from some small modifications, will try to do a proper review and suggestions later. On a side note, I'm a bit uncomfortable with the marketing-like/overselling stuff on the main security page, maybe we should try to be a bit more sober? Thanks!

[thebe14]

removed draft flag

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[thebe14]

The failed link check is because the service seems to be down today.

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[gwarf]

@enolfc , @andrea-manzi can you please have a look?

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[andrea-manzi]

one thing, i see that https://vault.services.fedcloud.eu:8200/ is the endpoint of the service. Maybe we could try to have an URL similar to the name of the service, like secrets.egi.eu ?

[thebe14]

one thing, i see that https://vault.services.fedcloud.eu:8200/ is the endpoint of the service. Maybe we could try to have an URL similar to the name of the service, like secrets.egi.eu ?

I asked Viet if we can have an endpoint without the port. He said yes, waiting for the implementation. And once that is ready, we can have whatever domain name we want. But let's not hold up this PR for that, will update when it becomes available.

[github-actions[bot]]

Documentation preview deployed!

Available at https://docs.egi.eu/documentation/567

[thebe14]

@gwarf Do you know who owns egi.eu? An alias record secrets.egi.eu to point to vault.service.fedcloud.eu would be great.

[andrea-manzi]

one thing, i see that https://vault.services.fedcloud.eu:8200/ is the endpoint of the service. Maybe we could try to have an URL similar to the name of the service, like secrets.egi.eu ?

I asked Viet if we can have an endpoint without the port. He said yes, waiting for the implementation. And once that is ready, we can have whatever domain name we want. But let's not hold up this PR for that, will update when it becomes available.

yes sure, that change can be done later

[gwarf]

@gwarf Do you know who owns egi.eu? An alias record secrets.egi.eu to point to vault.service.fedcloud.eu would be great.

We own and manage this domain ourselves, it could be doable in theory if/as this is an EGI owned service. Still a bit confused about the usage/management of that particular fedcloud.eu domain. We can discuss a possible domain under egi.eu via other channels.