Re: [charms] Barbican + Identity Standalone - AWS
Hey James! We were looking at adding Keystone as a user management backend for Kubernetes. This is a great step forward in making that possible, I noticed the barbican charm in the AWS deploy was "local", are there any major changes to the charm from ~openstack-charmers needed for it to run in AWS? Marco On Wed, Nov 30, 2016 at 6:50 AM Mark Shuttleworth wrote: > > Might be worth sharing this on some of the OpenStack lists too, for folks > who are interested in using Horizon this way on other substrates. > > Mark > > > On 29/11/16 21:36, James Beedy wrote: > > Another great day of Juju driven successes - deploying the barbican > standalone stack for identity mgmt and secrets mgmt. For those that don't > know, newton horizon brings support for identity only! This means you can > (as I am) use the openstack-dashboard for mgmt of just users, projects, and > domains, without a full Openstack! In previous Openstack releases, if you > hooked up horizon and you didn't have the core Openstack services > registered in your service catalogue, horizon would throw errors and would > be unusable. This is a huge win for those wanting object storage and > identity mgmt only, too! > > AWS Barbican Stack -> http://paste.ubuntu.com/23556001/ > > LXD Barbican Bundle (with script to help get started setting secrets in > barbican)-> https://github.com/jamesbeedy/juju-barbican-lxd-bundle > > Also, here's a utility function from barbican-client layer I've been using > to make getting secrets from barbican containers easy for charms (WIP) -> > https://github.com/jamesbeedy/juju-layer-barbican-client/blob/master/lib/charms/layer/barbican_client.py > > ~james > > > > -- > Juju mailing list > Juju@lists.ubuntu.com > Modify settings or unsubscribe at: > https://lists.ubuntu.com/mailman/listinfo/juju > -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
Re: [charms] Barbican + Identity Standalone - AWS
Might be worth sharing this on some of the OpenStack lists too, for folks who are interested in using Horizon this way on other substrates. Mark On 29/11/16 21:36, James Beedy wrote: > Another great day of Juju driven successes - deploying the barbican > standalone stack for identity mgmt and secrets mgmt. For those that > don't know, newton horizon brings support for identity only! This > means you can (as I am) use the openstack-dashboard for mgmt of just > users, projects, and domains, without a full Openstack! In previous > Openstack releases, if you hooked up horizon and you didn't have the > core Openstack services registered in your service catalogue, horizon > would throw errors and would be unusable. This is a huge win for those > wanting object storage and identity mgmt only, too! > > AWS Barbican Stack -> http://paste.ubuntu.com/23556001/ > > LXD Barbican Bundle (with script to help get started setting secrets > in barbican)-> https://github.com/jamesbeedy/juju-barbican-lxd-bundle > > Also, here's a utility function from barbican-client layer I've been > using to make getting secrets from barbican containers easy for charms > (WIP) -> > https://github.com/jamesbeedy/juju-layer-barbican-client/blob/master/lib/charms/layer/barbican_client.py > > ~james > > -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
Re: [charms] Barbican + Identity Standalone - AWS
Very cool, thanks for sharing! On Wed, Nov 30, 2016 at 10:36 AM, James Beedy wrote: > Another great day of Juju driven successes - deploying the barbican > standalone stack for identity mgmt and secrets mgmt. For those that don't > know, newton horizon brings support for identity only! This means you can > (as I am) use the openstack-dashboard for mgmt of just users, projects, and > domains, without a full Openstack! In previous Openstack releases, if you > hooked up horizon and you didn't have the core Openstack services > registered in your service catalogue, horizon would throw errors and would > be unusable. This is a huge win for those wanting object storage and > identity mgmt only, too! > > AWS Barbican Stack -> http://paste.ubuntu.com/23556001/ > > LXD Barbican Bundle (with script to help get started setting secrets in > barbican)-> https://github.com/jamesbeedy/juju-barbican-lxd-bundle > > Also, here's a utility function from barbican-client layer I've been using > to make getting secrets from barbican containers easy for charms (WIP) -> > https://github.com/jamesbeedy/juju-layer-barbican-client/ > blob/master/lib/charms/layer/barbican_client.py > > ~james > > -- > Juju-dev mailing list > juju-...@lists.ubuntu.com > Modify settings or unsubscribe at: https://lists.ubuntu.com/ > mailman/listinfo/juju-dev > > -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
[charms] Barbican + Identity Standalone - AWS
Another great day of Juju driven successes - deploying the barbican standalone stack for identity mgmt and secrets mgmt. For those that don't know, newton horizon brings support for identity only! This means you can (as I am) use the openstack-dashboard for mgmt of just users, projects, and domains, without a full Openstack! In previous Openstack releases, if you hooked up horizon and you didn't have the core Openstack services registered in your service catalogue, horizon would throw errors and would be unusable. This is a huge win for those wanting object storage and identity mgmt only, too! AWS Barbican Stack -> http://paste.ubuntu.com/23556001/ LXD Barbican Bundle (with script to help get started setting secrets in barbican)-> https://github.com/jamesbeedy/juju-barbican-lxd-bundle Also, here's a utility function from barbican-client layer I've been using to make getting secrets from barbican containers easy for charms (WIP) -> https://github.com/jamesbeedy/juju-layer-barbican-client/blob/master/lib/charms/layer/barbican_client.py ~james -- Juju mailing list Juju@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju