Телеграмм чат группы ru_hashicorp страница 1235

Next Steps
For Boundary's upcoming releases, we have 3 key product themes we’re focused on delivering:
Bring your own identity. We feel strongly that Boundary’s identity-based controls should use the same identity that users have for their other applications. To do so, we’ll progressively add support for new auth methods for Boundary. Our first step will be in delivering an OpenID Connect (OIDC) auth method.
Just-in-time access. A just-in-time access posture will be enforced at multiple levels within Boundary. Upcoming releases will offer integration with Vault or your preferred secret management solution of choice to generate ephemeral credentials for Boundary sessions.
Target discovery. To manage dynamic infrastructure users will need a way to discover and add newly provisioned hosts to targets while enforcing existing access policies on new instances. With Boundary 0.1, you can provision these targets and access policies dynamically with the Boundary Terraform provider. In the releases following launch we'll give administrators the ability to define dynamic host catalogs to discover new hosts based on predefined rules or tags for Consul, each of the major cloud platforms, and Kubernetes.

Vault by HashiCorp

Vault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Vault handles leasing, key revocation, key rolling, auditing, and provides secrets as a service through a unified API.

источник

02:40пожаловаться #9

Andrey Devyatkin in ru_hashicorp

Очень очевидные шаги и без них продукт не особо интересен

источник

02:41пожаловаться #10

Andrey Devyatkin in ru_hashicorp

Потенциал хороший но пару версий подождать придётся

источник

02:42пожаловаться #11

citius in ru_hashicorp

Andrey Devyatkin

Потенциал хороший но пару версий подождать придётся

мне кажется хашикорпу надо эту фразу корпоративным слоганом сделать.

источник

10:44пожаловаться #12

Sergei Mikhaltsov in ru_hashicorp

есть у кого рабочий пример работы с csi?

источник

10:56пожаловаться #13

manefesto in ru_hashicorp

Никто не ложил ssl в деплоймент для traefik ?

источник

11:42пожаловаться #14

Alexey Yurchenko in ru_hashicorp

Я одиночные кидал в consul и вставлял через template каждый. Если их пару штук, то норм

источник

11:48пожаловаться #15

Кирилл in ru_hashicorp

Никто не делал такой кейс: ACL Replication for Multiple Datacenters для Consul, интересен вот какой момент, если настроить репликацию то при подключении vault к secondary_datacenter консула будет ли он видеть другие vault подключенные к primary_datacenter и войдет ли с ними в HA cluster vault?

источник

14:15пожаловаться #16

GithubReleases in ru_hashicorp

hashicorp/terraform tagged: v0.14.0-beta1
Link: https://github.com/hashicorp/terraform/releases/tag/v0.14.0-beta1
Release notes:

## 0.14.0 (Unreleased)

NEW FEATURES:

*

`terraform init`: Terraform will now generate a lock file in the configuration directory which you can check in to your version control so that Terraform can make the same version selections in future. ([#265...

GitHub

Release v0.14.0-beta1 · hashicorp/terraform

0.14.0 (Unreleased)
NEW FEATURES:

terraform init: Terraform will now generate a lock file in the configuration directory which you can check in to your version control so that Terraform can make ...