Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-8711

Implement Agent Functions to support secret lookups at catalog application time

    Details

    • Type: Epic
    • Status: Developing
    • Priority: Normal
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: PUP 6.0.0
    • Component/s: None
    • Labels:
      None
    • Epic Name:
      Agent Functions
    • Template:
    • Team/s:
      Server
    • QA Risk Assessment:
      Needs Assessment

      Description

      Many modern infrastructures make use of key-value stores like Conjur by CyberArk, Consul and Vault by Hashicorp, or Apache Zookeeper. These services keep track of rapidly-changing information like the list of servers currently active in an application pool as well as provide a central, access-controlled distribution point for sensitive data like access tokens, login credentials, and encryption keys.

      This epic tracks work towards a feature with the working title of "Agent Lookups", which provides a natural, intuitive interface to these services. Using the new Deferred type and a function, the agent consults the service as it applies the catalog, providing credentials if needed, and injects the result of the lookup into the appropriate place on the host. 

        Attachments

          Activity

            jsd-sla-details-panel

              People

              • Assignee:
                Unassigned
                Reporter:
                eric.sorenson Eric Sorenson
              • Votes:
                0 Vote for this issue
                Watchers:
                15 Start watching this issue

                Dates

                • Created:
                  Updated: