Manage secrets - SSH keys for machines - Githubissues

docker-archive / deploykit

A toolkit for creating and managing declarative, self-healing infrastructure.

Apache License 2.0

2.25k stars 262 forks source link

Manage secrets - SSH keys for machines #23

Closed chungers closed 8 years ago

chungers commented 8 years ago

A few points on managing machine secrets

This should be separate from managing provider access tokens / credentials
Need to scale from local desktop usage to enterprise / sharing / secrets management without impacting user experience
If the user starts out with the single Engine and then slowly scale up to a cluster / enterprise scenario, how to migrate this seamlessly?
Support for password-enabled SSH key? What does that integration look like for outside of local desktop UX?

Implementation Notes

File based, over FUSE volume that can start from local file (e.g. BoltDB) and eventually to Keywhiz / Vault?
POC:
- https://github.com/ehazlett/docker-volume-libsecret
- https://github.com/ehazlett/libsecret

wfarner commented 8 years ago

Closing this as we don't currently have a need for it.