Openshift/Kubernetes Conjur demo

Demonstrates the use of Conjur in Kubernetes or Openshift for machine identity and secrets delivery.

As a secondary objective, which may be refactored to a separate demo in the future, this repo shows a multi-node master cluster with failover.

Prerequisites:

Minikube.
Conjur CLI installed locally.
conjur-authn-k8s_0.2.0.0-91ac501_amd64.deb.zip. Download to the directory "conjur_server_build" and unzip it.

Cluster management

0_init.sh - Setup the docker environment and create the conjur Kubernetes namespace.
1_build_all.sh - Build images used by the demo.
2a_startup_solo_master.sh - Run a single conjur-master Pod.
2b_startup_master_cluster.sh - Run a master and 2 standbys, plus a conjur-master service which uses HAProxy.
3_startup-followers.sh - Create the conjur-follower Service.
4_cluster_failover.sh - Fail over to a standby pod and re-build the master as a standby. This will not work in solo master mode.
5_delete_all.sh - Deletes the entire cluster.
time_sync.sh - use as needed to sync vbox clock with host.

./webapp_demo (directory) - scripts and support for running the scalability demo using authn-k8s

0_demo_init.sh - configure and login the local command-line interface.
1_load_k8s_policy.sh - loads the policies which are performed by the Kubernetes admi.n
2_load_app_policy.sh - loads the application policy, which would be managed by an application team.
3_load_db_policy.sh - loads the database policy, which would be managed by a DBA team.
4_deploy.sh - deploys the webapp application and starts the containers fetching secrets.
5_delete_deployment.sh - deletes all the k8s objects.
webapp.yaml - Kubernetes description for the webapp application.