container-registry / harbor-satellite

Harbor Satellite (WIP)
Apache License 2.0
13 stars 8 forks source link

zero touch device registration #36

Open Vad1mo opened 1 month ago

Vad1mo commented 1 month ago

Is there a way how a satellite can register to ground control, are there zero touch capable solutions?

kunal-511 commented 1 month ago

Cloud-Based Registration Services: Cloud-based services provide a centralized registration platform for satellites, enabling zero-touch registration and management. Some popular zero-touch capable solutions include: 1.Red Hat Satellite 2.AWS Ground Station 3.SaltStack

Vad1mo commented 1 month ago

Thank you ChatGPT

kunal-511 commented 1 month ago

Ya meta AI😅😂

bupd commented 3 weeks ago

here's some idea I had regarding the zero touch registration. excalidraw 1

Vad1mo commented 3 weeks ago

A sequence diagram would be helpful @bupd

bupd commented 3 weeks ago

Sequence Diagram

Sequence Diagram

Breakdown of the Process Flow

Participants:

GC (Ground Control): Manages satellites, registration, and grouping.
Satellite: Edge devices that connect to Ground Control and fetch artifacts.
Reg (Central Registry): Stores and provides access to OCI-compliant artifacts.
Operator: The person managing the Ground Control system.
  1. Token Generation and Deployment:

    • GC generates a general token.
    • Independently deploy the Satellite with this general token.
  2. Satellite Registration:

    • Satellite calls /ztr/reg on GC with the general token.
    • GC confirms the registration and issues a unique token to the Satellite.
  3. Updating and Grouping:

    • GC updates the list of registered and online satellites.
    • Operator (GC Operator) accepts the satellite registration.
    • Operator creates a group and assigns the Satellite to this group.
  4. Artifact Management:

    • Operator groups artifacts from the Central Registry.
    • GC pushes the grouped artifacts to the OCI repository associated with the satellite group.
  5. Communication with Satellite:

    • GC sends the Satellite the registry URL, authentication parameters, and group assignment.
    • Satellite subscribes to the appropriate OCI repository and fetches artifacts.
    • Satellite sends regular heartbeat/ping signals to GC.

cc // @Vad1mo

bupd commented 2 weeks ago

Better Sequence Diagram

Sequence diagram

@Vad1mo